java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ntdrivers-simplified/diskperf_simpl1_true-unreach-call_true-valid-memsafety_true-termination.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.1.23-18e5b2d-m [2018-11-18 23:28:50,051 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 23:28:50,053 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 23:28:50,065 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 23:28:50,066 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 23:28:50,067 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 23:28:50,068 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 23:28:50,070 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 23:28:50,072 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 23:28:50,072 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 23:28:50,074 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 23:28:50,074 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 23:28:50,075 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 23:28:50,077 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 23:28:50,078 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 23:28:50,085 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 23:28:50,085 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 23:28:50,088 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 23:28:50,091 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 23:28:50,093 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 23:28:50,094 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 23:28:50,097 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 23:28:50,100 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 23:28:50,103 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 23:28:50,103 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 23:28:50,104 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 23:28:50,105 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 23:28:50,105 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 23:28:50,107 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 23:28:50,108 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 23:28:50,108 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 23:28:50,111 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 23:28:50,111 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 23:28:50,111 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 23:28:50,114 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 23:28:50,114 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 23:28:50,115 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-18 23:28:50,140 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 23:28:50,141 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 23:28:50,141 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-18 23:28:50,142 INFO L133 SettingsManager]: * to procedures, called more than once=true [2018-11-18 23:28:50,142 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 23:28:50,142 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 23:28:50,143 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 23:28:50,143 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 23:28:50,143 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-18 23:28:50,143 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-18 23:28:50,143 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-18 23:28:50,144 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 23:28:50,144 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-18 23:28:50,144 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-18 23:28:50,144 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-18 23:28:50,144 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-18 23:28:50,144 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 23:28:50,145 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 23:28:50,145 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-18 23:28:50,145 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 23:28:50,145 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 23:28:50,145 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-18 23:28:50,146 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-18 23:28:50,146 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-18 23:28:50,146 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 23:28:50,146 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-18 23:28:50,146 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-18 23:28:50,147 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-18 23:28:50,148 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-18 23:28:50,149 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-18 23:28:50,149 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-18 23:28:50,209 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 23:28:50,221 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 23:28:50,225 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 23:28:50,227 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 23:28:50,227 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 23:28:50,228 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ntdrivers-simplified/diskperf_simpl1_true-unreach-call_true-valid-memsafety_true-termination.cil.c [2018-11-18 23:28:50,293 INFO L221 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/077bac3a0/9c76b3f85bad40a5969eec21f488cf07/FLAG4840ac8d0 [2018-11-18 23:28:50,790 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 23:28:50,794 INFO L161 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/diskperf_simpl1_true-unreach-call_true-valid-memsafety_true-termination.cil.c [2018-11-18 23:28:50,812 INFO L355 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/077bac3a0/9c76b3f85bad40a5969eec21f488cf07/FLAG4840ac8d0 [2018-11-18 23:28:51,110 INFO L363 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/077bac3a0/9c76b3f85bad40a5969eec21f488cf07 [2018-11-18 23:28:51,123 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 23:28:51,125 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2018-11-18 23:28:51,126 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 23:28:51,126 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 23:28:51,132 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 23:28:51,134 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 11:28:51" (1/1) ... [2018-11-18 23:28:51,138 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@34258a71 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:28:51, skipping insertion in model container [2018-11-18 23:28:51,138 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 11:28:51" (1/1) ... [2018-11-18 23:28:51,148 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 23:28:51,205 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 23:28:51,647 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 23:28:51,653 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 23:28:51,856 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 23:28:51,890 INFO L195 MainTranslator]: Completed translation [2018-11-18 23:28:51,890 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:28:51 WrapperNode [2018-11-18 23:28:51,890 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 23:28:51,891 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 23:28:51,892 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 23:28:51,893 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 23:28:51,984 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:28:51" (1/1) ... [2018-11-18 23:28:51,985 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:28:51" (1/1) ... [2018-11-18 23:28:52,006 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:28:51" (1/1) ... [2018-11-18 23:28:52,007 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:28:51" (1/1) ... [2018-11-18 23:28:52,066 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:28:51" (1/1) ... [2018-11-18 23:28:52,089 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:28:51" (1/1) ... [2018-11-18 23:28:52,100 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:28:51" (1/1) ... [2018-11-18 23:28:52,117 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 23:28:52,120 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 23:28:52,120 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 23:28:52,120 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 23:28:52,121 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:28:51" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-18 23:28:52,186 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-18 23:28:52,186 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 23:28:52,187 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2018-11-18 23:28:52,187 INFO L138 BoogieDeclarations]: Found implementation of procedure _BLAST_init [2018-11-18 23:28:52,187 INFO L138 BoogieDeclarations]: Found implementation of procedure DiskPerfSyncFilterWithTarget [2018-11-18 23:28:52,187 INFO L138 BoogieDeclarations]: Found implementation of procedure DiskPerfDispatchPnp [2018-11-18 23:28:52,187 INFO L138 BoogieDeclarations]: Found implementation of procedure DiskPerfIrpCompletion [2018-11-18 23:28:52,187 INFO L138 BoogieDeclarations]: Found implementation of procedure DiskPerfStartDevice [2018-11-18 23:28:52,188 INFO L138 BoogieDeclarations]: Found implementation of procedure DiskPerfRemoveDevice [2018-11-18 23:28:52,188 INFO L138 BoogieDeclarations]: Found implementation of procedure DiskPerfSendToNextDriver [2018-11-18 23:28:52,191 INFO L138 BoogieDeclarations]: Found implementation of procedure DiskPerfDispatchPower [2018-11-18 23:28:52,192 INFO L138 BoogieDeclarations]: Found implementation of procedure DiskPerfForwardIrpSynchronous [2018-11-18 23:28:52,192 INFO L138 BoogieDeclarations]: Found implementation of procedure DiskPerfCreate [2018-11-18 23:28:52,192 INFO L138 BoogieDeclarations]: Found implementation of procedure DiskPerfIoCompletion [2018-11-18 23:28:52,192 INFO L138 BoogieDeclarations]: Found implementation of procedure DiskPerfDeviceControl [2018-11-18 23:28:52,192 INFO L138 BoogieDeclarations]: Found implementation of procedure DiskPerfShutdownFlush [2018-11-18 23:28:52,193 INFO L138 BoogieDeclarations]: Found implementation of procedure DiskPerfUnload [2018-11-18 23:28:52,193 INFO L138 BoogieDeclarations]: Found implementation of procedure DiskPerfRegisterDevice [2018-11-18 23:28:52,193 INFO L138 BoogieDeclarations]: Found implementation of procedure stub_driver_init [2018-11-18 23:28:52,193 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-18 23:28:52,193 INFO L138 BoogieDeclarations]: Found implementation of procedure IoBuildDeviceIoControlRequest [2018-11-18 23:28:52,193 INFO L138 BoogieDeclarations]: Found implementation of procedure stubMoreProcessingRequired [2018-11-18 23:28:52,195 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2018-11-18 23:28:52,195 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2018-11-18 23:28:52,196 INFO L138 BoogieDeclarations]: Found implementation of procedure KeSetEvent [2018-11-18 23:28:52,196 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2018-11-18 23:28:52,196 INFO L138 BoogieDeclarations]: Found implementation of procedure PoCallDriver [2018-11-18 23:28:52,196 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2018-11-18 23:28:52,196 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_char [2018-11-18 23:28:52,196 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2018-11-18 23:28:52,197 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2018-11-18 23:28:52,197 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_pointer [2018-11-18 23:28:52,197 INFO L130 BoogieDeclarations]: Found specification of procedure DiskPerfDispatchPnp [2018-11-18 23:28:52,197 INFO L130 BoogieDeclarations]: Found specification of procedure DiskPerfIrpCompletion [2018-11-18 23:28:52,197 INFO L130 BoogieDeclarations]: Found specification of procedure DiskPerfStartDevice [2018-11-18 23:28:52,197 INFO L130 BoogieDeclarations]: Found specification of procedure DiskPerfRemoveDevice [2018-11-18 23:28:52,198 INFO L130 BoogieDeclarations]: Found specification of procedure DiskPerfSendToNextDriver [2018-11-18 23:28:52,198 INFO L130 BoogieDeclarations]: Found specification of procedure DiskPerfDispatchPower [2018-11-18 23:28:52,198 INFO L130 BoogieDeclarations]: Found specification of procedure DiskPerfForwardIrpSynchronous [2018-11-18 23:28:52,198 INFO L130 BoogieDeclarations]: Found specification of procedure DiskPerfCreate [2018-11-18 23:28:52,198 INFO L130 BoogieDeclarations]: Found specification of procedure DiskPerfIoCompletion [2018-11-18 23:28:52,198 INFO L130 BoogieDeclarations]: Found specification of procedure DiskPerfDeviceControl [2018-11-18 23:28:52,198 INFO L130 BoogieDeclarations]: Found specification of procedure DiskPerfShutdownFlush [2018-11-18 23:28:52,199 INFO L130 BoogieDeclarations]: Found specification of procedure DiskPerfRegisterDevice [2018-11-18 23:28:52,201 INFO L130 BoogieDeclarations]: Found specification of procedure IoBuildDeviceIoControlRequest [2018-11-18 23:28:52,201 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2018-11-18 23:28:52,201 INFO L130 BoogieDeclarations]: Found specification of procedure KeSetEvent [2018-11-18 23:28:52,201 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2018-11-18 23:28:52,201 INFO L130 BoogieDeclarations]: Found specification of procedure PoCallDriver [2018-11-18 23:28:52,201 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2018-11-18 23:28:52,202 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2018-11-18 23:28:52,202 INFO L130 BoogieDeclarations]: Found specification of procedure _BLAST_init [2018-11-18 23:28:52,202 INFO L130 BoogieDeclarations]: Found specification of procedure DiskPerfSyncFilterWithTarget [2018-11-18 23:28:52,202 INFO L130 BoogieDeclarations]: Found specification of procedure DiskPerfUnload [2018-11-18 23:28:52,202 INFO L130 BoogieDeclarations]: Found specification of procedure stub_driver_init [2018-11-18 23:28:52,202 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-18 23:28:52,202 INFO L130 BoogieDeclarations]: Found specification of procedure stubMoreProcessingRequired [2018-11-18 23:28:52,203 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-18 23:28:52,203 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 23:28:52,618 WARN L687 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-18 23:28:52,618 WARN L652 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-18 23:28:53,411 WARN L687 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-18 23:28:53,411 WARN L652 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-18 23:28:53,602 WARN L687 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-18 23:28:53,602 WARN L652 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-18 23:28:53,943 WARN L687 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-18 23:28:53,944 WARN L652 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-18 23:28:54,661 WARN L687 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-18 23:28:54,662 WARN L652 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-18 23:28:54,953 WARN L687 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-18 23:28:54,953 WARN L652 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-18 23:28:55,211 INFO L280 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 23:28:55,212 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:28:55 BoogieIcfgContainer [2018-11-18 23:28:55,212 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 23:28:55,213 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-18 23:28:55,214 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-18 23:28:55,217 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-18 23:28:55,217 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 11:28:51" (1/3) ... [2018-11-18 23:28:55,218 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@fb80f34 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 11:28:55, skipping insertion in model container [2018-11-18 23:28:55,218 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:28:51" (2/3) ... [2018-11-18 23:28:55,219 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@fb80f34 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 11:28:55, skipping insertion in model container [2018-11-18 23:28:55,219 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:28:55" (3/3) ... [2018-11-18 23:28:55,221 INFO L112 eAbstractionObserver]: Analyzing ICFG diskperf_simpl1_true-unreach-call_true-valid-memsafety_true-termination.cil.c [2018-11-18 23:28:55,231 INFO L136 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-18 23:28:55,239 INFO L148 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-18 23:28:55,254 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-18 23:28:55,292 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 23:28:55,293 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-18 23:28:55,293 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-18 23:28:55,294 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-18 23:28:55,294 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 23:28:55,294 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 23:28:55,294 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-18 23:28:55,294 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 23:28:55,294 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-18 23:28:55,324 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states. [2018-11-18 23:28:55,331 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2018-11-18 23:28:55,332 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:28:55,333 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:28:55,335 INFO L423 AbstractCegarLoop]: === Iteration 1 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:28:55,341 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:28:55,341 INFO L82 PathProgramCache]: Analyzing trace with hash 429432298, now seen corresponding path program 1 times [2018-11-18 23:28:55,343 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:28:55,343 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:28:55,397 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:28:55,397 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:28:55,398 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:28:55,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:28:55,784 INFO L256 TraceCheckUtils]: 0: Hoare triple {299#true} call ULTIMATE.init(); {299#true} is VALID [2018-11-18 23:28:55,789 INFO L273 TraceCheckUtils]: 1: Hoare triple {299#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {299#true} is VALID [2018-11-18 23:28:55,789 INFO L273 TraceCheckUtils]: 2: Hoare triple {299#true} assume true; {299#true} is VALID [2018-11-18 23:28:55,790 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {299#true} {299#true} #813#return; {299#true} is VALID [2018-11-18 23:28:55,790 INFO L256 TraceCheckUtils]: 4: Hoare triple {299#true} call #t~ret127 := main(); {299#true} is VALID [2018-11-18 23:28:55,791 INFO L273 TraceCheckUtils]: 5: Hoare triple {299#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {299#true} is VALID [2018-11-18 23:28:55,791 INFO L256 TraceCheckUtils]: 6: Hoare triple {299#true} call _BLAST_init(); {299#true} is VALID [2018-11-18 23:28:55,802 INFO L273 TraceCheckUtils]: 7: Hoare triple {299#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {301#(= ~s~0 ~UNLOADED~0)} is VALID [2018-11-18 23:28:55,818 INFO L273 TraceCheckUtils]: 8: Hoare triple {301#(= ~s~0 ~UNLOADED~0)} assume true; {301#(= ~s~0 ~UNLOADED~0)} is VALID [2018-11-18 23:28:55,834 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {301#(= ~s~0 ~UNLOADED~0)} {299#true} #697#return; {301#(= ~s~0 ~UNLOADED~0)} is VALID [2018-11-18 23:28:55,850 INFO L273 TraceCheckUtils]: 10: Hoare triple {301#(= ~s~0 ~UNLOADED~0)} assume !(~status~6 >= 0); {301#(= ~s~0 ~UNLOADED~0)} is VALID [2018-11-18 23:28:55,863 INFO L273 TraceCheckUtils]: 11: Hoare triple {301#(= ~s~0 ~UNLOADED~0)} assume !(1 == ~pended~0); {301#(= ~s~0 ~UNLOADED~0)} is VALID [2018-11-18 23:28:55,878 INFO L273 TraceCheckUtils]: 12: Hoare triple {301#(= ~s~0 ~UNLOADED~0)} assume !(1 == ~pended~0); {301#(= ~s~0 ~UNLOADED~0)} is VALID [2018-11-18 23:28:55,888 INFO L273 TraceCheckUtils]: 13: Hoare triple {301#(= ~s~0 ~UNLOADED~0)} assume ~s~0 != ~UNLOADED~0; {300#false} is VALID [2018-11-18 23:28:55,888 INFO L273 TraceCheckUtils]: 14: Hoare triple {300#false} assume -1 != ~status~6; {300#false} is VALID [2018-11-18 23:28:55,889 INFO L273 TraceCheckUtils]: 15: Hoare triple {300#false} assume !(~s~0 != ~SKIP2~0); {300#false} is VALID [2018-11-18 23:28:55,890 INFO L273 TraceCheckUtils]: 16: Hoare triple {300#false} assume 1 == ~pended~0; {300#false} is VALID [2018-11-18 23:28:55,890 INFO L273 TraceCheckUtils]: 17: Hoare triple {300#false} assume 259 != ~status~6; {300#false} is VALID [2018-11-18 23:28:55,890 INFO L256 TraceCheckUtils]: 18: Hoare triple {300#false} call errorFn(); {300#false} is VALID [2018-11-18 23:28:55,891 INFO L273 TraceCheckUtils]: 19: Hoare triple {300#false} assume !false; {300#false} is VALID [2018-11-18 23:28:55,898 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:28:55,900 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:28:55,900 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 23:28:55,907 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2018-11-18 23:28:55,910 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:28:55,914 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-18 23:28:55,970 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:28:55,970 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 23:28:55,981 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 23:28:55,982 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:28:55,985 INFO L87 Difference]: Start difference. First operand 296 states. Second operand 3 states. [2018-11-18 23:28:57,658 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:28:57,658 INFO L93 Difference]: Finished difference Result 538 states and 781 transitions. [2018-11-18 23:28:57,659 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 23:28:57,659 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2018-11-18 23:28:57,659 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:28:57,662 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:28:57,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 781 transitions. [2018-11-18 23:28:57,714 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:28:57,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 781 transitions. [2018-11-18 23:28:57,739 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 781 transitions. [2018-11-18 23:28:59,009 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 781 edges. 781 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:28:59,052 INFO L225 Difference]: With dead ends: 538 [2018-11-18 23:28:59,053 INFO L226 Difference]: Without dead ends: 288 [2018-11-18 23:28:59,067 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:28:59,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 288 states. [2018-11-18 23:28:59,680 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 288 to 288. [2018-11-18 23:28:59,681 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:28:59,682 INFO L82 GeneralOperation]: Start isEquivalent. First operand 288 states. Second operand 288 states. [2018-11-18 23:28:59,683 INFO L74 IsIncluded]: Start isIncluded. First operand 288 states. Second operand 288 states. [2018-11-18 23:28:59,683 INFO L87 Difference]: Start difference. First operand 288 states. Second operand 288 states. [2018-11-18 23:28:59,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:28:59,712 INFO L93 Difference]: Finished difference Result 288 states and 384 transitions. [2018-11-18 23:28:59,712 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 384 transitions. [2018-11-18 23:28:59,719 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:28:59,719 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:28:59,720 INFO L74 IsIncluded]: Start isIncluded. First operand 288 states. Second operand 288 states. [2018-11-18 23:28:59,720 INFO L87 Difference]: Start difference. First operand 288 states. Second operand 288 states. [2018-11-18 23:28:59,738 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:28:59,739 INFO L93 Difference]: Finished difference Result 288 states and 384 transitions. [2018-11-18 23:28:59,739 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 384 transitions. [2018-11-18 23:28:59,742 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:28:59,743 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:28:59,743 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:28:59,743 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:28:59,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 288 states. [2018-11-18 23:28:59,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 288 states to 288 states and 384 transitions. [2018-11-18 23:28:59,762 INFO L78 Accepts]: Start accepts. Automaton has 288 states and 384 transitions. Word has length 20 [2018-11-18 23:28:59,763 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:28:59,763 INFO L480 AbstractCegarLoop]: Abstraction has 288 states and 384 transitions. [2018-11-18 23:28:59,763 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 23:28:59,763 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 384 transitions. [2018-11-18 23:28:59,764 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2018-11-18 23:28:59,764 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:28:59,764 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:28:59,765 INFO L423 AbstractCegarLoop]: === Iteration 2 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:28:59,765 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:28:59,765 INFO L82 PathProgramCache]: Analyzing trace with hash 400819778, now seen corresponding path program 1 times [2018-11-18 23:28:59,765 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:28:59,766 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:28:59,767 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:28:59,767 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:28:59,767 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:28:59,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:29:00,053 INFO L256 TraceCheckUtils]: 0: Hoare triple {1997#true} call ULTIMATE.init(); {1997#true} is VALID [2018-11-18 23:29:00,054 INFO L273 TraceCheckUtils]: 1: Hoare triple {1997#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {1997#true} is VALID [2018-11-18 23:29:00,055 INFO L273 TraceCheckUtils]: 2: Hoare triple {1997#true} assume true; {1997#true} is VALID [2018-11-18 23:29:00,055 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1997#true} {1997#true} #813#return; {1997#true} is VALID [2018-11-18 23:29:00,056 INFO L256 TraceCheckUtils]: 4: Hoare triple {1997#true} call #t~ret127 := main(); {1997#true} is VALID [2018-11-18 23:29:00,056 INFO L273 TraceCheckUtils]: 5: Hoare triple {1997#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {1997#true} is VALID [2018-11-18 23:29:00,057 INFO L256 TraceCheckUtils]: 6: Hoare triple {1997#true} call _BLAST_init(); {1997#true} is VALID [2018-11-18 23:29:00,057 INFO L273 TraceCheckUtils]: 7: Hoare triple {1997#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1997#true} is VALID [2018-11-18 23:29:00,057 INFO L273 TraceCheckUtils]: 8: Hoare triple {1997#true} assume true; {1997#true} is VALID [2018-11-18 23:29:00,058 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {1997#true} {1997#true} #697#return; {1997#true} is VALID [2018-11-18 23:29:00,073 INFO L273 TraceCheckUtils]: 10: Hoare triple {1997#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {1999#(= ~s~0 ~NP~0)} is VALID [2018-11-18 23:29:00,087 INFO L273 TraceCheckUtils]: 11: Hoare triple {1999#(= ~s~0 ~NP~0)} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {1999#(= ~s~0 ~NP~0)} is VALID [2018-11-18 23:29:00,088 INFO L256 TraceCheckUtils]: 12: Hoare triple {1999#(= ~s~0 ~NP~0)} call stub_driver_init(); {1997#true} is VALID [2018-11-18 23:29:00,103 INFO L273 TraceCheckUtils]: 13: Hoare triple {1997#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {1999#(= ~s~0 ~NP~0)} is VALID [2018-11-18 23:29:00,106 INFO L273 TraceCheckUtils]: 14: Hoare triple {1999#(= ~s~0 ~NP~0)} assume true; {1999#(= ~s~0 ~NP~0)} is VALID [2018-11-18 23:29:00,107 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {1999#(= ~s~0 ~NP~0)} {1999#(= ~s~0 ~NP~0)} #699#return; {1999#(= ~s~0 ~NP~0)} is VALID [2018-11-18 23:29:00,111 INFO L273 TraceCheckUtils]: 16: Hoare triple {1999#(= ~s~0 ~NP~0)} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {1999#(= ~s~0 ~NP~0)} is VALID [2018-11-18 23:29:00,111 INFO L273 TraceCheckUtils]: 17: Hoare triple {1999#(= ~s~0 ~NP~0)} assume 0 == ~tmp_ndt_1~0; {1999#(= ~s~0 ~NP~0)} is VALID [2018-11-18 23:29:00,112 INFO L256 TraceCheckUtils]: 18: Hoare triple {1999#(= ~s~0 ~NP~0)} call #t~ret108 := DiskPerfCreate(~devobj~0, ~pirp~0); {1999#(= ~s~0 ~NP~0)} is VALID [2018-11-18 23:29:00,114 INFO L273 TraceCheckUtils]: 19: Hoare triple {1999#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~myStatus~0 := 0; {1999#(= ~s~0 ~NP~0)} is VALID [2018-11-18 23:29:00,115 INFO L256 TraceCheckUtils]: 20: Hoare triple {1999#(= ~s~0 ~NP~0)} call IofCompleteRequest(~Irp, 0); {1999#(= ~s~0 ~NP~0)} is VALID [2018-11-18 23:29:00,116 INFO L273 TraceCheckUtils]: 21: Hoare triple {1999#(= ~s~0 ~NP~0)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {1999#(= ~s~0 ~NP~0)} is VALID [2018-11-18 23:29:00,116 INFO L273 TraceCheckUtils]: 22: Hoare triple {1999#(= ~s~0 ~NP~0)} assume !(~s~0 == ~NP~0); {1998#false} is VALID [2018-11-18 23:29:00,117 INFO L256 TraceCheckUtils]: 23: Hoare triple {1998#false} call errorFn(); {1998#false} is VALID [2018-11-18 23:29:00,117 INFO L273 TraceCheckUtils]: 24: Hoare triple {1998#false} assume !false; {1998#false} is VALID [2018-11-18 23:29:00,120 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:29:00,120 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:29:00,120 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 23:29:00,122 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 25 [2018-11-18 23:29:00,122 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:29:00,123 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-18 23:29:00,196 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:00,196 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 23:29:00,197 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 23:29:00,197 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:29:00,197 INFO L87 Difference]: Start difference. First operand 288 states and 384 transitions. Second operand 3 states. [2018-11-18 23:29:02,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:02,516 INFO L93 Difference]: Finished difference Result 638 states and 883 transitions. [2018-11-18 23:29:02,516 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 23:29:02,516 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 25 [2018-11-18 23:29:02,517 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:29:02,517 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:29:02,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 883 transitions. [2018-11-18 23:29:02,538 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:29:02,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 883 transitions. [2018-11-18 23:29:02,555 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 883 transitions. [2018-11-18 23:29:03,763 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 883 edges. 883 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:03,787 INFO L225 Difference]: With dead ends: 638 [2018-11-18 23:29:03,788 INFO L226 Difference]: Without dead ends: 455 [2018-11-18 23:29:03,790 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 3 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:29:03,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 455 states. [2018-11-18 23:29:04,040 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 455 to 435. [2018-11-18 23:29:04,041 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:29:04,041 INFO L82 GeneralOperation]: Start isEquivalent. First operand 455 states. Second operand 435 states. [2018-11-18 23:29:04,041 INFO L74 IsIncluded]: Start isIncluded. First operand 455 states. Second operand 435 states. [2018-11-18 23:29:04,042 INFO L87 Difference]: Start difference. First operand 455 states. Second operand 435 states. [2018-11-18 23:29:04,070 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:04,070 INFO L93 Difference]: Finished difference Result 455 states and 623 transitions. [2018-11-18 23:29:04,071 INFO L276 IsEmpty]: Start isEmpty. Operand 455 states and 623 transitions. [2018-11-18 23:29:04,074 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:04,074 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:04,074 INFO L74 IsIncluded]: Start isIncluded. First operand 435 states. Second operand 455 states. [2018-11-18 23:29:04,075 INFO L87 Difference]: Start difference. First operand 435 states. Second operand 455 states. [2018-11-18 23:29:04,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:04,107 INFO L93 Difference]: Finished difference Result 455 states and 623 transitions. [2018-11-18 23:29:04,108 INFO L276 IsEmpty]: Start isEmpty. Operand 455 states and 623 transitions. [2018-11-18 23:29:04,114 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:04,114 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:04,115 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:29:04,115 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:29:04,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 435 states. [2018-11-18 23:29:04,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 435 states to 435 states and 598 transitions. [2018-11-18 23:29:04,172 INFO L78 Accepts]: Start accepts. Automaton has 435 states and 598 transitions. Word has length 25 [2018-11-18 23:29:04,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:29:04,173 INFO L480 AbstractCegarLoop]: Abstraction has 435 states and 598 transitions. [2018-11-18 23:29:04,173 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 23:29:04,173 INFO L276 IsEmpty]: Start isEmpty. Operand 435 states and 598 transitions. [2018-11-18 23:29:04,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2018-11-18 23:29:04,174 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:29:04,175 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:29:04,180 INFO L423 AbstractCegarLoop]: === Iteration 3 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:29:04,180 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:29:04,181 INFO L82 PathProgramCache]: Analyzing trace with hash 833919559, now seen corresponding path program 1 times [2018-11-18 23:29:04,181 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:29:04,181 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:29:04,182 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:04,182 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:29:04,182 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:04,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:29:04,465 INFO L256 TraceCheckUtils]: 0: Hoare triple {4354#true} call ULTIMATE.init(); {4354#true} is VALID [2018-11-18 23:29:04,465 INFO L273 TraceCheckUtils]: 1: Hoare triple {4354#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {4354#true} is VALID [2018-11-18 23:29:04,466 INFO L273 TraceCheckUtils]: 2: Hoare triple {4354#true} assume true; {4354#true} is VALID [2018-11-18 23:29:04,466 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {4354#true} {4354#true} #813#return; {4354#true} is VALID [2018-11-18 23:29:04,466 INFO L256 TraceCheckUtils]: 4: Hoare triple {4354#true} call #t~ret127 := main(); {4354#true} is VALID [2018-11-18 23:29:04,466 INFO L273 TraceCheckUtils]: 5: Hoare triple {4354#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {4354#true} is VALID [2018-11-18 23:29:04,467 INFO L256 TraceCheckUtils]: 6: Hoare triple {4354#true} call _BLAST_init(); {4354#true} is VALID [2018-11-18 23:29:04,467 INFO L273 TraceCheckUtils]: 7: Hoare triple {4354#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4354#true} is VALID [2018-11-18 23:29:04,467 INFO L273 TraceCheckUtils]: 8: Hoare triple {4354#true} assume true; {4354#true} is VALID [2018-11-18 23:29:04,467 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {4354#true} {4354#true} #697#return; {4354#true} is VALID [2018-11-18 23:29:04,468 INFO L273 TraceCheckUtils]: 10: Hoare triple {4354#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {4354#true} is VALID [2018-11-18 23:29:04,468 INFO L273 TraceCheckUtils]: 11: Hoare triple {4354#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {4354#true} is VALID [2018-11-18 23:29:04,468 INFO L256 TraceCheckUtils]: 12: Hoare triple {4354#true} call stub_driver_init(); {4354#true} is VALID [2018-11-18 23:29:04,473 INFO L273 TraceCheckUtils]: 13: Hoare triple {4354#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,473 INFO L273 TraceCheckUtils]: 14: Hoare triple {4356#(= 0 ~compRegistered~0)} assume true; {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,474 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {4356#(= 0 ~compRegistered~0)} {4354#true} #699#return; {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,475 INFO L273 TraceCheckUtils]: 16: Hoare triple {4356#(= 0 ~compRegistered~0)} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,477 INFO L273 TraceCheckUtils]: 17: Hoare triple {4356#(= 0 ~compRegistered~0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,482 INFO L273 TraceCheckUtils]: 18: Hoare triple {4356#(= 0 ~compRegistered~0)} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,484 INFO L273 TraceCheckUtils]: 19: Hoare triple {4356#(= 0 ~compRegistered~0)} assume 3 == ~tmp_ndt_3~0; {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,486 INFO L256 TraceCheckUtils]: 20: Hoare triple {4356#(= 0 ~compRegistered~0)} call #t~ret110 := DiskPerfDispatchPnp(~devobj~0, ~pirp~0); {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,488 INFO L273 TraceCheckUtils]: 21: Hoare triple {4356#(= 0 ~compRegistered~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet0;havoc #t~nondet0;assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647;~irpSp__MinorFunction~0 := #t~nondet1;havoc #t~nondet1;havoc ~irpSp~0;havoc ~status~0;havoc ~tmp~0;~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,488 INFO L273 TraceCheckUtils]: 22: Hoare triple {4356#(= 0 ~compRegistered~0)} assume 0 == ~irpSp__MinorFunction~0; {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,489 INFO L256 TraceCheckUtils]: 23: Hoare triple {4356#(= 0 ~compRegistered~0)} call #t~ret2 := DiskPerfStartDevice(~DeviceObject, ~Irp); {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,497 INFO L273 TraceCheckUtils]: 24: Hoare triple {4356#(= 0 ~compRegistered~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~deviceExtension__TargetDeviceObject~0 := #t~nondet7;havoc #t~nondet7;havoc ~Irp__IoStatus__Status~0;havoc ~deviceExtension~0;havoc ~status~1;~deviceExtension~0 := ~DeviceObject__DeviceExtension~0; {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,505 INFO L256 TraceCheckUtils]: 25: Hoare triple {4356#(= 0 ~compRegistered~0)} call #t~ret8 := DiskPerfForwardIrpSynchronous(~DeviceObject, ~Irp); {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,505 INFO L273 TraceCheckUtils]: 26: Hoare triple {4356#(= 0 ~compRegistered~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~3 := #t~nondet27;havoc #t~nondet27;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~DeviceObject__DeviceExtension~4 := #t~nondet28;havoc #t~nondet28;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~deviceExtension__TargetDeviceObject~3 := #t~nondet29;havoc #t~nondet29;havoc ~deviceExtension~4;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~event~0 := #t~nondet30;havoc #t~nondet30;havoc ~status~3;havoc ~nextIrpSp__Control~0;havoc ~irpSp~1;havoc ~nextIrpSp~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~irpSp___0~0;havoc ~__cil_tmp15~0;~deviceExtension~4 := ~DeviceObject__DeviceExtension~4;~irpSp~1 := ~Irp__Tail__Overlay__CurrentStackLocation~3;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~3 - 1;~nextIrpSp__Control~0 := 0; {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,506 INFO L273 TraceCheckUtils]: 27: Hoare triple {4356#(= 0 ~compRegistered~0)} assume !(~s~0 != ~NP~0); {4356#(= 0 ~compRegistered~0)} is VALID [2018-11-18 23:29:04,506 INFO L273 TraceCheckUtils]: 28: Hoare triple {4356#(= 0 ~compRegistered~0)} assume 0 != ~compRegistered~0; {4355#false} is VALID [2018-11-18 23:29:04,506 INFO L256 TraceCheckUtils]: 29: Hoare triple {4355#false} call errorFn(); {4355#false} is VALID [2018-11-18 23:29:04,507 INFO L273 TraceCheckUtils]: 30: Hoare triple {4355#false} assume !false; {4355#false} is VALID [2018-11-18 23:29:04,509 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:29:04,509 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:29:04,509 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 23:29:04,510 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 31 [2018-11-18 23:29:04,510 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:29:04,510 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-18 23:29:04,547 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:04,548 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 23:29:04,548 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 23:29:04,548 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:29:04,549 INFO L87 Difference]: Start difference. First operand 435 states and 598 transitions. Second operand 3 states. [2018-11-18 23:29:06,103 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:06,104 INFO L93 Difference]: Finished difference Result 964 states and 1384 transitions. [2018-11-18 23:29:06,104 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 23:29:06,104 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 31 [2018-11-18 23:29:06,104 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:29:06,104 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:29:06,115 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 819 transitions. [2018-11-18 23:29:06,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:29:06,124 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 819 transitions. [2018-11-18 23:29:06,125 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 819 transitions. [2018-11-18 23:29:07,222 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 819 edges. 819 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:07,265 INFO L225 Difference]: With dead ends: 964 [2018-11-18 23:29:07,266 INFO L226 Difference]: Without dead ends: 647 [2018-11-18 23:29:07,269 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:29:07,270 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 647 states. [2018-11-18 23:29:08,433 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 647 to 607. [2018-11-18 23:29:08,434 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:29:08,434 INFO L82 GeneralOperation]: Start isEquivalent. First operand 647 states. Second operand 607 states. [2018-11-18 23:29:08,434 INFO L74 IsIncluded]: Start isIncluded. First operand 647 states. Second operand 607 states. [2018-11-18 23:29:08,434 INFO L87 Difference]: Start difference. First operand 647 states. Second operand 607 states. [2018-11-18 23:29:08,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:08,472 INFO L93 Difference]: Finished difference Result 647 states and 915 transitions. [2018-11-18 23:29:08,472 INFO L276 IsEmpty]: Start isEmpty. Operand 647 states and 915 transitions. [2018-11-18 23:29:08,477 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:08,478 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:08,478 INFO L74 IsIncluded]: Start isIncluded. First operand 607 states. Second operand 647 states. [2018-11-18 23:29:08,478 INFO L87 Difference]: Start difference. First operand 607 states. Second operand 647 states. [2018-11-18 23:29:08,517 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:08,517 INFO L93 Difference]: Finished difference Result 647 states and 915 transitions. [2018-11-18 23:29:08,518 INFO L276 IsEmpty]: Start isEmpty. Operand 647 states and 915 transitions. [2018-11-18 23:29:08,522 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:08,522 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:08,522 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:29:08,523 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:29:08,523 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 607 states. [2018-11-18 23:29:08,563 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 607 states to 607 states and 868 transitions. [2018-11-18 23:29:08,564 INFO L78 Accepts]: Start accepts. Automaton has 607 states and 868 transitions. Word has length 31 [2018-11-18 23:29:08,564 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:29:08,564 INFO L480 AbstractCegarLoop]: Abstraction has 607 states and 868 transitions. [2018-11-18 23:29:08,564 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 23:29:08,565 INFO L276 IsEmpty]: Start isEmpty. Operand 607 states and 868 transitions. [2018-11-18 23:29:08,566 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2018-11-18 23:29:08,566 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:29:08,566 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:29:08,566 INFO L423 AbstractCegarLoop]: === Iteration 4 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:29:08,567 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:29:08,567 INFO L82 PathProgramCache]: Analyzing trace with hash -240377485, now seen corresponding path program 1 times [2018-11-18 23:29:08,567 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:29:08,567 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:29:08,568 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:08,568 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:29:08,568 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:08,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:29:08,896 INFO L256 TraceCheckUtils]: 0: Hoare triple {7754#true} call ULTIMATE.init(); {7754#true} is VALID [2018-11-18 23:29:08,896 INFO L273 TraceCheckUtils]: 1: Hoare triple {7754#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {7754#true} is VALID [2018-11-18 23:29:08,897 INFO L273 TraceCheckUtils]: 2: Hoare triple {7754#true} assume true; {7754#true} is VALID [2018-11-18 23:29:08,897 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {7754#true} {7754#true} #813#return; {7754#true} is VALID [2018-11-18 23:29:08,897 INFO L256 TraceCheckUtils]: 4: Hoare triple {7754#true} call #t~ret127 := main(); {7754#true} is VALID [2018-11-18 23:29:08,898 INFO L273 TraceCheckUtils]: 5: Hoare triple {7754#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {7754#true} is VALID [2018-11-18 23:29:08,898 INFO L256 TraceCheckUtils]: 6: Hoare triple {7754#true} call _BLAST_init(); {7754#true} is VALID [2018-11-18 23:29:08,898 INFO L273 TraceCheckUtils]: 7: Hoare triple {7754#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {7754#true} is VALID [2018-11-18 23:29:08,898 INFO L273 TraceCheckUtils]: 8: Hoare triple {7754#true} assume true; {7754#true} is VALID [2018-11-18 23:29:08,899 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {7754#true} {7754#true} #697#return; {7754#true} is VALID [2018-11-18 23:29:08,899 INFO L273 TraceCheckUtils]: 10: Hoare triple {7754#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {7754#true} is VALID [2018-11-18 23:29:08,899 INFO L273 TraceCheckUtils]: 11: Hoare triple {7754#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {7754#true} is VALID [2018-11-18 23:29:08,900 INFO L256 TraceCheckUtils]: 12: Hoare triple {7754#true} call stub_driver_init(); {7754#true} is VALID [2018-11-18 23:29:08,900 INFO L273 TraceCheckUtils]: 13: Hoare triple {7754#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {7754#true} is VALID [2018-11-18 23:29:08,900 INFO L273 TraceCheckUtils]: 14: Hoare triple {7754#true} assume true; {7754#true} is VALID [2018-11-18 23:29:08,900 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {7754#true} {7754#true} #699#return; {7754#true} is VALID [2018-11-18 23:29:08,901 INFO L273 TraceCheckUtils]: 16: Hoare triple {7754#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {7754#true} is VALID [2018-11-18 23:29:08,901 INFO L273 TraceCheckUtils]: 17: Hoare triple {7754#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {7754#true} is VALID [2018-11-18 23:29:08,901 INFO L273 TraceCheckUtils]: 18: Hoare triple {7754#true} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {7754#true} is VALID [2018-11-18 23:29:08,902 INFO L273 TraceCheckUtils]: 19: Hoare triple {7754#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet106 && #t~nondet106 <= 2147483647;~tmp_ndt_4~0 := #t~nondet106;havoc #t~nondet106; {7754#true} is VALID [2018-11-18 23:29:08,902 INFO L273 TraceCheckUtils]: 20: Hoare triple {7754#true} assume 4 == ~tmp_ndt_4~0; {7754#true} is VALID [2018-11-18 23:29:08,902 INFO L256 TraceCheckUtils]: 21: Hoare triple {7754#true} call #t~ret111 := DiskPerfDispatchPower(~devobj~0, ~pirp~0); {7754#true} is VALID [2018-11-18 23:29:08,903 INFO L273 TraceCheckUtils]: 22: Hoare triple {7754#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet21;havoc #t~nondet21;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~DeviceObject__DeviceExtension~3 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~deviceExtension__TargetDeviceObject~2 := #t~nondet23;havoc #t~nondet23;havoc ~deviceExtension~3;havoc ~tmp~2; {7754#true} is VALID [2018-11-18 23:29:08,915 INFO L273 TraceCheckUtils]: 23: Hoare triple {7754#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {7756#(= ~s~0 ~SKIP1~0)} is VALID [2018-11-18 23:29:08,928 INFO L273 TraceCheckUtils]: 24: Hoare triple {7756#(= ~s~0 ~SKIP1~0)} #t~post24 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post24;havoc #t~post24;#t~post25 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post25;havoc #t~post25;~deviceExtension~3 := ~DeviceObject__DeviceExtension~3; {7756#(= ~s~0 ~SKIP1~0)} is VALID [2018-11-18 23:29:08,942 INFO L256 TraceCheckUtils]: 25: Hoare triple {7756#(= ~s~0 ~SKIP1~0)} call #t~ret26 := PoCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); {7756#(= ~s~0 ~SKIP1~0)} is VALID [2018-11-18 23:29:08,954 INFO L273 TraceCheckUtils]: 26: Hoare triple {7756#(= ~s~0 ~SKIP1~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~lcontext~1 := #t~nondet122;havoc #t~nondet122;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~0; {7756#(= ~s~0 ~SKIP1~0)} is VALID [2018-11-18 23:29:08,967 INFO L273 TraceCheckUtils]: 27: Hoare triple {7756#(= ~s~0 ~SKIP1~0)} assume !(0 != ~compRegistered~0); {7756#(= ~s~0 ~SKIP1~0)} is VALID [2018-11-18 23:29:08,980 INFO L273 TraceCheckUtils]: 28: Hoare triple {7756#(= ~s~0 ~SKIP1~0)} havoc ~tmp_ndt_11~0;assume -2147483648 <= #t~nondet125 && #t~nondet125 <= 2147483647;~tmp_ndt_11~0 := #t~nondet125;havoc #t~nondet125; {7756#(= ~s~0 ~SKIP1~0)} is VALID [2018-11-18 23:29:08,993 INFO L273 TraceCheckUtils]: 29: Hoare triple {7756#(= ~s~0 ~SKIP1~0)} assume 0 == ~tmp_ndt_11~0; {7756#(= ~s~0 ~SKIP1~0)} is VALID [2018-11-18 23:29:09,006 INFO L273 TraceCheckUtils]: 30: Hoare triple {7756#(= ~s~0 ~SKIP1~0)} ~returnVal~0 := 0; {7756#(= ~s~0 ~SKIP1~0)} is VALID [2018-11-18 23:29:09,018 INFO L273 TraceCheckUtils]: 31: Hoare triple {7756#(= ~s~0 ~SKIP1~0)} assume !(~s~0 == ~NP~0); {7756#(= ~s~0 ~SKIP1~0)} is VALID [2018-11-18 23:29:09,029 INFO L273 TraceCheckUtils]: 32: Hoare triple {7756#(= ~s~0 ~SKIP1~0)} assume !(~s~0 == ~MPR1~0); {7756#(= ~s~0 ~SKIP1~0)} is VALID [2018-11-18 23:29:09,041 INFO L273 TraceCheckUtils]: 33: Hoare triple {7756#(= ~s~0 ~SKIP1~0)} assume !(~s~0 == ~SKIP1~0); {7755#false} is VALID [2018-11-18 23:29:09,042 INFO L256 TraceCheckUtils]: 34: Hoare triple {7755#false} call errorFn(); {7755#false} is VALID [2018-11-18 23:29:09,042 INFO L273 TraceCheckUtils]: 35: Hoare triple {7755#false} assume !false; {7755#false} is VALID [2018-11-18 23:29:09,044 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:29:09,045 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:29:09,045 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 23:29:09,045 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 36 [2018-11-18 23:29:09,045 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:29:09,046 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-18 23:29:09,497 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:09,497 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 23:29:09,497 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 23:29:09,498 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:29:09,498 INFO L87 Difference]: Start difference. First operand 607 states and 868 transitions. Second operand 3 states. [2018-11-18 23:29:11,600 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:11,601 INFO L93 Difference]: Finished difference Result 622 states and 888 transitions. [2018-11-18 23:29:11,601 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 23:29:11,601 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 36 [2018-11-18 23:29:11,601 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:29:11,602 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:29:11,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 380 transitions. [2018-11-18 23:29:11,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:29:11,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 380 transitions. [2018-11-18 23:29:11,612 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 380 transitions. [2018-11-18 23:29:12,579 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 380 edges. 380 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:12,612 INFO L225 Difference]: With dead ends: 622 [2018-11-18 23:29:12,612 INFO L226 Difference]: Without dead ends: 618 [2018-11-18 23:29:12,613 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:29:12,614 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 618 states. [2018-11-18 23:29:13,033 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 618 to 617. [2018-11-18 23:29:13,033 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:29:13,034 INFO L82 GeneralOperation]: Start isEquivalent. First operand 618 states. Second operand 617 states. [2018-11-18 23:29:13,034 INFO L74 IsIncluded]: Start isIncluded. First operand 618 states. Second operand 617 states. [2018-11-18 23:29:13,034 INFO L87 Difference]: Start difference. First operand 618 states. Second operand 617 states. [2018-11-18 23:29:13,069 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:13,069 INFO L93 Difference]: Finished difference Result 618 states and 883 transitions. [2018-11-18 23:29:13,069 INFO L276 IsEmpty]: Start isEmpty. Operand 618 states and 883 transitions. [2018-11-18 23:29:13,074 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:13,074 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:13,074 INFO L74 IsIncluded]: Start isIncluded. First operand 617 states. Second operand 618 states. [2018-11-18 23:29:13,075 INFO L87 Difference]: Start difference. First operand 617 states. Second operand 618 states. [2018-11-18 23:29:13,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:13,110 INFO L93 Difference]: Finished difference Result 618 states and 883 transitions. [2018-11-18 23:29:13,110 INFO L276 IsEmpty]: Start isEmpty. Operand 618 states and 883 transitions. [2018-11-18 23:29:13,115 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:13,115 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:13,116 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:29:13,116 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:29:13,116 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 617 states. [2018-11-18 23:29:13,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 617 states to 617 states and 881 transitions. [2018-11-18 23:29:13,154 INFO L78 Accepts]: Start accepts. Automaton has 617 states and 881 transitions. Word has length 36 [2018-11-18 23:29:13,155 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:29:13,155 INFO L480 AbstractCegarLoop]: Abstraction has 617 states and 881 transitions. [2018-11-18 23:29:13,155 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 23:29:13,155 INFO L276 IsEmpty]: Start isEmpty. Operand 617 states and 881 transitions. [2018-11-18 23:29:13,156 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2018-11-18 23:29:13,156 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:29:13,157 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:29:13,157 INFO L423 AbstractCegarLoop]: === Iteration 5 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:29:13,157 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:29:13,157 INFO L82 PathProgramCache]: Analyzing trace with hash -1175004135, now seen corresponding path program 1 times [2018-11-18 23:29:13,158 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:29:13,158 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:29:13,158 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:13,159 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:29:13,159 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:13,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:29:13,430 INFO L256 TraceCheckUtils]: 0: Hoare triple {10665#true} call ULTIMATE.init(); {10665#true} is VALID [2018-11-18 23:29:13,431 INFO L273 TraceCheckUtils]: 1: Hoare triple {10665#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {10665#true} is VALID [2018-11-18 23:29:13,431 INFO L273 TraceCheckUtils]: 2: Hoare triple {10665#true} assume true; {10665#true} is VALID [2018-11-18 23:29:13,431 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {10665#true} {10665#true} #813#return; {10665#true} is VALID [2018-11-18 23:29:13,431 INFO L256 TraceCheckUtils]: 4: Hoare triple {10665#true} call #t~ret127 := main(); {10665#true} is VALID [2018-11-18 23:29:13,432 INFO L273 TraceCheckUtils]: 5: Hoare triple {10665#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {10665#true} is VALID [2018-11-18 23:29:13,432 INFO L256 TraceCheckUtils]: 6: Hoare triple {10665#true} call _BLAST_init(); {10665#true} is VALID [2018-11-18 23:29:13,432 INFO L273 TraceCheckUtils]: 7: Hoare triple {10665#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10665#true} is VALID [2018-11-18 23:29:13,433 INFO L273 TraceCheckUtils]: 8: Hoare triple {10665#true} assume true; {10665#true} is VALID [2018-11-18 23:29:13,433 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {10665#true} {10665#true} #697#return; {10665#true} is VALID [2018-11-18 23:29:13,433 INFO L273 TraceCheckUtils]: 10: Hoare triple {10665#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {10665#true} is VALID [2018-11-18 23:29:13,433 INFO L273 TraceCheckUtils]: 11: Hoare triple {10665#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {10665#true} is VALID [2018-11-18 23:29:13,434 INFO L256 TraceCheckUtils]: 12: Hoare triple {10665#true} call stub_driver_init(); {10665#true} is VALID [2018-11-18 23:29:13,434 INFO L273 TraceCheckUtils]: 13: Hoare triple {10665#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {10665#true} is VALID [2018-11-18 23:29:13,434 INFO L273 TraceCheckUtils]: 14: Hoare triple {10665#true} assume true; {10665#true} is VALID [2018-11-18 23:29:13,434 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {10665#true} {10665#true} #699#return; {10665#true} is VALID [2018-11-18 23:29:13,435 INFO L273 TraceCheckUtils]: 16: Hoare triple {10665#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {10665#true} is VALID [2018-11-18 23:29:13,435 INFO L273 TraceCheckUtils]: 17: Hoare triple {10665#true} assume 0 == ~tmp_ndt_1~0; {10665#true} is VALID [2018-11-18 23:29:13,435 INFO L256 TraceCheckUtils]: 18: Hoare triple {10665#true} call #t~ret108 := DiskPerfCreate(~devobj~0, ~pirp~0); {10665#true} is VALID [2018-11-18 23:29:13,435 INFO L273 TraceCheckUtils]: 19: Hoare triple {10665#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~myStatus~0 := 0; {10665#true} is VALID [2018-11-18 23:29:13,436 INFO L256 TraceCheckUtils]: 20: Hoare triple {10665#true} call IofCompleteRequest(~Irp, 0); {10665#true} is VALID [2018-11-18 23:29:13,436 INFO L273 TraceCheckUtils]: 21: Hoare triple {10665#true} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10665#true} is VALID [2018-11-18 23:29:13,436 INFO L273 TraceCheckUtils]: 22: Hoare triple {10665#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10665#true} is VALID [2018-11-18 23:29:13,436 INFO L273 TraceCheckUtils]: 23: Hoare triple {10665#true} assume true; {10665#true} is VALID [2018-11-18 23:29:13,437 INFO L268 TraceCheckUtils]: 24: Hoare quadruple {10665#true} {10665#true} #793#return; {10665#true} is VALID [2018-11-18 23:29:13,437 INFO L273 TraceCheckUtils]: 25: Hoare triple {10665#true} #res := 0; {10665#true} is VALID [2018-11-18 23:29:13,437 INFO L273 TraceCheckUtils]: 26: Hoare triple {10665#true} assume true; {10665#true} is VALID [2018-11-18 23:29:13,437 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {10665#true} {10665#true} #701#return; {10665#true} is VALID [2018-11-18 23:29:13,438 INFO L273 TraceCheckUtils]: 28: Hoare triple {10665#true} assume -2147483648 <= #t~ret108 && #t~ret108 <= 2147483647;~status~6 := #t~ret108;havoc #t~ret108; {10665#true} is VALID [2018-11-18 23:29:13,438 INFO L273 TraceCheckUtils]: 29: Hoare triple {10665#true} assume !(0 != ~we_should_unload~0); {10665#true} is VALID [2018-11-18 23:29:13,450 INFO L273 TraceCheckUtils]: 30: Hoare triple {10665#true} assume !(1 == ~pended~0); {10667#(not (= ~pended~0 1))} is VALID [2018-11-18 23:29:13,463 INFO L273 TraceCheckUtils]: 31: Hoare triple {10667#(not (= ~pended~0 1))} assume !(1 == ~pended~0); {10667#(not (= ~pended~0 1))} is VALID [2018-11-18 23:29:13,476 INFO L273 TraceCheckUtils]: 32: Hoare triple {10667#(not (= ~pended~0 1))} assume ~s~0 != ~UNLOADED~0; {10667#(not (= ~pended~0 1))} is VALID [2018-11-18 23:29:13,494 INFO L273 TraceCheckUtils]: 33: Hoare triple {10667#(not (= ~pended~0 1))} assume -1 != ~status~6; {10667#(not (= ~pended~0 1))} is VALID [2018-11-18 23:29:13,503 INFO L273 TraceCheckUtils]: 34: Hoare triple {10667#(not (= ~pended~0 1))} assume !(~s~0 != ~SKIP2~0); {10667#(not (= ~pended~0 1))} is VALID [2018-11-18 23:29:13,515 INFO L273 TraceCheckUtils]: 35: Hoare triple {10667#(not (= ~pended~0 1))} assume 1 == ~pended~0; {10666#false} is VALID [2018-11-18 23:29:13,516 INFO L273 TraceCheckUtils]: 36: Hoare triple {10666#false} assume 259 != ~status~6; {10666#false} is VALID [2018-11-18 23:29:13,516 INFO L256 TraceCheckUtils]: 37: Hoare triple {10666#false} call errorFn(); {10666#false} is VALID [2018-11-18 23:29:13,516 INFO L273 TraceCheckUtils]: 38: Hoare triple {10666#false} assume !false; {10666#false} is VALID [2018-11-18 23:29:13,518 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:29:13,519 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:29:13,519 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 23:29:13,519 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 39 [2018-11-18 23:29:13,519 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:29:13,520 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-18 23:29:13,643 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 39 edges. 39 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:13,644 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 23:29:13,644 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 23:29:13,644 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:29:13,645 INFO L87 Difference]: Start difference. First operand 617 states and 881 transitions. Second operand 3 states. [2018-11-18 23:29:15,211 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:15,211 INFO L93 Difference]: Finished difference Result 1073 states and 1584 transitions. [2018-11-18 23:29:15,211 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 23:29:15,212 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 39 [2018-11-18 23:29:15,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:29:15,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:29:15,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 611 transitions. [2018-11-18 23:29:15,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:29:15,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 611 transitions. [2018-11-18 23:29:15,227 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 611 transitions. [2018-11-18 23:29:16,418 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 611 edges. 611 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:16,513 INFO L225 Difference]: With dead ends: 1073 [2018-11-18 23:29:16,513 INFO L226 Difference]: Without dead ends: 1054 [2018-11-18 23:29:16,515 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:29:16,516 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1054 states. [2018-11-18 23:29:17,752 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1054 to 1024. [2018-11-18 23:29:17,752 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:29:17,752 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1054 states. Second operand 1024 states. [2018-11-18 23:29:17,752 INFO L74 IsIncluded]: Start isIncluded. First operand 1054 states. Second operand 1024 states. [2018-11-18 23:29:17,753 INFO L87 Difference]: Start difference. First operand 1054 states. Second operand 1024 states. [2018-11-18 23:29:17,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:17,828 INFO L93 Difference]: Finished difference Result 1054 states and 1557 transitions. [2018-11-18 23:29:17,829 INFO L276 IsEmpty]: Start isEmpty. Operand 1054 states and 1557 transitions. [2018-11-18 23:29:17,838 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:17,838 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:17,838 INFO L74 IsIncluded]: Start isIncluded. First operand 1024 states. Second operand 1054 states. [2018-11-18 23:29:17,838 INFO L87 Difference]: Start difference. First operand 1024 states. Second operand 1054 states. [2018-11-18 23:29:17,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:17,921 INFO L93 Difference]: Finished difference Result 1054 states and 1557 transitions. [2018-11-18 23:29:17,921 INFO L276 IsEmpty]: Start isEmpty. Operand 1054 states and 1557 transitions. [2018-11-18 23:29:17,930 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:17,930 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:17,930 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:29:17,930 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:29:17,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1024 states. [2018-11-18 23:29:18,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1024 states to 1024 states and 1525 transitions. [2018-11-18 23:29:18,027 INFO L78 Accepts]: Start accepts. Automaton has 1024 states and 1525 transitions. Word has length 39 [2018-11-18 23:29:18,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:29:18,027 INFO L480 AbstractCegarLoop]: Abstraction has 1024 states and 1525 transitions. [2018-11-18 23:29:18,027 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 23:29:18,027 INFO L276 IsEmpty]: Start isEmpty. Operand 1024 states and 1525 transitions. [2018-11-18 23:29:18,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2018-11-18 23:29:18,029 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:29:18,029 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:29:18,029 INFO L423 AbstractCegarLoop]: === Iteration 6 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:29:18,030 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:29:18,030 INFO L82 PathProgramCache]: Analyzing trace with hash -1189349044, now seen corresponding path program 1 times [2018-11-18 23:29:18,030 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:29:18,030 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:29:18,031 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:18,031 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:29:18,031 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:18,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:29:18,209 INFO L256 TraceCheckUtils]: 0: Hoare triple {15593#true} call ULTIMATE.init(); {15593#true} is VALID [2018-11-18 23:29:18,209 INFO L273 TraceCheckUtils]: 1: Hoare triple {15593#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {15593#true} is VALID [2018-11-18 23:29:18,209 INFO L273 TraceCheckUtils]: 2: Hoare triple {15593#true} assume true; {15593#true} is VALID [2018-11-18 23:29:18,209 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {15593#true} {15593#true} #813#return; {15593#true} is VALID [2018-11-18 23:29:18,210 INFO L256 TraceCheckUtils]: 4: Hoare triple {15593#true} call #t~ret127 := main(); {15593#true} is VALID [2018-11-18 23:29:18,210 INFO L273 TraceCheckUtils]: 5: Hoare triple {15593#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {15593#true} is VALID [2018-11-18 23:29:18,210 INFO L256 TraceCheckUtils]: 6: Hoare triple {15593#true} call _BLAST_init(); {15593#true} is VALID [2018-11-18 23:29:18,210 INFO L273 TraceCheckUtils]: 7: Hoare triple {15593#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15593#true} is VALID [2018-11-18 23:29:18,210 INFO L273 TraceCheckUtils]: 8: Hoare triple {15593#true} assume true; {15593#true} is VALID [2018-11-18 23:29:18,210 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {15593#true} {15593#true} #697#return; {15593#true} is VALID [2018-11-18 23:29:18,211 INFO L273 TraceCheckUtils]: 10: Hoare triple {15593#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {15593#true} is VALID [2018-11-18 23:29:18,211 INFO L273 TraceCheckUtils]: 11: Hoare triple {15593#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {15593#true} is VALID [2018-11-18 23:29:18,211 INFO L256 TraceCheckUtils]: 12: Hoare triple {15593#true} call stub_driver_init(); {15593#true} is VALID [2018-11-18 23:29:18,211 INFO L273 TraceCheckUtils]: 13: Hoare triple {15593#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {15593#true} is VALID [2018-11-18 23:29:18,211 INFO L273 TraceCheckUtils]: 14: Hoare triple {15593#true} assume true; {15593#true} is VALID [2018-11-18 23:29:18,211 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {15593#true} {15593#true} #699#return; {15593#true} is VALID [2018-11-18 23:29:18,212 INFO L273 TraceCheckUtils]: 16: Hoare triple {15593#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {15593#true} is VALID [2018-11-18 23:29:18,212 INFO L273 TraceCheckUtils]: 17: Hoare triple {15593#true} assume 0 == ~tmp_ndt_1~0; {15593#true} is VALID [2018-11-18 23:29:18,212 INFO L256 TraceCheckUtils]: 18: Hoare triple {15593#true} call #t~ret108 := DiskPerfCreate(~devobj~0, ~pirp~0); {15593#true} is VALID [2018-11-18 23:29:18,212 INFO L273 TraceCheckUtils]: 19: Hoare triple {15593#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~myStatus~0 := 0; {15593#true} is VALID [2018-11-18 23:29:18,212 INFO L256 TraceCheckUtils]: 20: Hoare triple {15593#true} call IofCompleteRequest(~Irp, 0); {15593#true} is VALID [2018-11-18 23:29:18,212 INFO L273 TraceCheckUtils]: 21: Hoare triple {15593#true} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {15593#true} is VALID [2018-11-18 23:29:18,215 INFO L273 TraceCheckUtils]: 22: Hoare triple {15593#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {15595#(= ~DC~0 ~s~0)} is VALID [2018-11-18 23:29:18,215 INFO L273 TraceCheckUtils]: 23: Hoare triple {15595#(= ~DC~0 ~s~0)} assume true; {15595#(= ~DC~0 ~s~0)} is VALID [2018-11-18 23:29:18,216 INFO L268 TraceCheckUtils]: 24: Hoare quadruple {15595#(= ~DC~0 ~s~0)} {15593#true} #793#return; {15595#(= ~DC~0 ~s~0)} is VALID [2018-11-18 23:29:18,217 INFO L273 TraceCheckUtils]: 25: Hoare triple {15595#(= ~DC~0 ~s~0)} #res := 0; {15595#(= ~DC~0 ~s~0)} is VALID [2018-11-18 23:29:18,217 INFO L273 TraceCheckUtils]: 26: Hoare triple {15595#(= ~DC~0 ~s~0)} assume true; {15595#(= ~DC~0 ~s~0)} is VALID [2018-11-18 23:29:18,219 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {15595#(= ~DC~0 ~s~0)} {15593#true} #701#return; {15595#(= ~DC~0 ~s~0)} is VALID [2018-11-18 23:29:18,219 INFO L273 TraceCheckUtils]: 28: Hoare triple {15595#(= ~DC~0 ~s~0)} assume -2147483648 <= #t~ret108 && #t~ret108 <= 2147483647;~status~6 := #t~ret108;havoc #t~ret108; {15595#(= ~DC~0 ~s~0)} is VALID [2018-11-18 23:29:18,221 INFO L273 TraceCheckUtils]: 29: Hoare triple {15595#(= ~DC~0 ~s~0)} assume !(0 != ~we_should_unload~0); {15595#(= ~DC~0 ~s~0)} is VALID [2018-11-18 23:29:18,221 INFO L273 TraceCheckUtils]: 30: Hoare triple {15595#(= ~DC~0 ~s~0)} assume !(1 == ~pended~0); {15595#(= ~DC~0 ~s~0)} is VALID [2018-11-18 23:29:18,223 INFO L273 TraceCheckUtils]: 31: Hoare triple {15595#(= ~DC~0 ~s~0)} assume !(1 == ~pended~0); {15595#(= ~DC~0 ~s~0)} is VALID [2018-11-18 23:29:18,231 INFO L273 TraceCheckUtils]: 32: Hoare triple {15595#(= ~DC~0 ~s~0)} assume ~s~0 != ~UNLOADED~0; {15595#(= ~DC~0 ~s~0)} is VALID [2018-11-18 23:29:18,247 INFO L273 TraceCheckUtils]: 33: Hoare triple {15595#(= ~DC~0 ~s~0)} assume -1 != ~status~6; {15595#(= ~DC~0 ~s~0)} is VALID [2018-11-18 23:29:18,256 INFO L273 TraceCheckUtils]: 34: Hoare triple {15595#(= ~DC~0 ~s~0)} assume ~s~0 != ~SKIP2~0; {15595#(= ~DC~0 ~s~0)} is VALID [2018-11-18 23:29:18,263 INFO L273 TraceCheckUtils]: 35: Hoare triple {15595#(= ~DC~0 ~s~0)} assume ~s~0 != ~IPC~0; {15595#(= ~DC~0 ~s~0)} is VALID [2018-11-18 23:29:18,264 INFO L273 TraceCheckUtils]: 36: Hoare triple {15595#(= ~DC~0 ~s~0)} assume ~s~0 != ~DC~0; {15594#false} is VALID [2018-11-18 23:29:18,264 INFO L256 TraceCheckUtils]: 37: Hoare triple {15594#false} call errorFn(); {15594#false} is VALID [2018-11-18 23:29:18,264 INFO L273 TraceCheckUtils]: 38: Hoare triple {15594#false} assume !false; {15594#false} is VALID [2018-11-18 23:29:18,266 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:29:18,266 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:29:18,266 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 23:29:18,267 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 39 [2018-11-18 23:29:18,267 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:29:18,267 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-18 23:29:18,338 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 39 edges. 39 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:18,338 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 23:29:18,339 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 23:29:18,339 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:29:18,339 INFO L87 Difference]: Start difference. First operand 1024 states and 1525 transitions. Second operand 3 states. [2018-11-18 23:29:20,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:20,225 INFO L93 Difference]: Finished difference Result 1051 states and 1555 transitions. [2018-11-18 23:29:20,225 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 23:29:20,226 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 39 [2018-11-18 23:29:20,226 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:29:20,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:29:20,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 388 transitions. [2018-11-18 23:29:20,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:29:20,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 388 transitions. [2018-11-18 23:29:20,234 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 388 transitions. [2018-11-18 23:29:20,662 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 388 edges. 388 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:20,733 INFO L225 Difference]: With dead ends: 1051 [2018-11-18 23:29:20,733 INFO L226 Difference]: Without dead ends: 1046 [2018-11-18 23:29:20,734 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:29:20,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1046 states. [2018-11-18 23:29:22,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1046 to 1044. [2018-11-18 23:29:22,126 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:29:22,126 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1046 states. Second operand 1044 states. [2018-11-18 23:29:22,126 INFO L74 IsIncluded]: Start isIncluded. First operand 1046 states. Second operand 1044 states. [2018-11-18 23:29:22,128 INFO L87 Difference]: Start difference. First operand 1046 states. Second operand 1044 states. [2018-11-18 23:29:22,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:22,181 INFO L93 Difference]: Finished difference Result 1046 states and 1548 transitions. [2018-11-18 23:29:22,181 INFO L276 IsEmpty]: Start isEmpty. Operand 1046 states and 1548 transitions. [2018-11-18 23:29:22,188 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:22,188 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:22,188 INFO L74 IsIncluded]: Start isIncluded. First operand 1044 states. Second operand 1046 states. [2018-11-18 23:29:22,189 INFO L87 Difference]: Start difference. First operand 1044 states. Second operand 1046 states. [2018-11-18 23:29:22,272 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:22,272 INFO L93 Difference]: Finished difference Result 1046 states and 1548 transitions. [2018-11-18 23:29:22,272 INFO L276 IsEmpty]: Start isEmpty. Operand 1046 states and 1548 transitions. [2018-11-18 23:29:22,278 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:22,278 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:22,279 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:29:22,279 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:29:22,279 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1044 states. [2018-11-18 23:29:22,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1044 states to 1044 states and 1547 transitions. [2018-11-18 23:29:22,369 INFO L78 Accepts]: Start accepts. Automaton has 1044 states and 1547 transitions. Word has length 39 [2018-11-18 23:29:22,370 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:29:22,370 INFO L480 AbstractCegarLoop]: Abstraction has 1044 states and 1547 transitions. [2018-11-18 23:29:22,370 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 23:29:22,370 INFO L276 IsEmpty]: Start isEmpty. Operand 1044 states and 1547 transitions. [2018-11-18 23:29:22,371 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-11-18 23:29:22,371 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:29:22,372 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:29:22,372 INFO L423 AbstractCegarLoop]: === Iteration 7 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:29:22,372 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:29:22,372 INFO L82 PathProgramCache]: Analyzing trace with hash -2057356528, now seen corresponding path program 1 times [2018-11-18 23:29:22,372 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:29:22,372 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:29:22,373 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:22,373 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:29:22,374 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:22,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:29:22,668 INFO L256 TraceCheckUtils]: 0: Hoare triple {20501#true} call ULTIMATE.init(); {20501#true} is VALID [2018-11-18 23:29:22,668 INFO L273 TraceCheckUtils]: 1: Hoare triple {20501#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {20501#true} is VALID [2018-11-18 23:29:22,669 INFO L273 TraceCheckUtils]: 2: Hoare triple {20501#true} assume true; {20501#true} is VALID [2018-11-18 23:29:22,669 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {20501#true} {20501#true} #813#return; {20501#true} is VALID [2018-11-18 23:29:22,670 INFO L256 TraceCheckUtils]: 4: Hoare triple {20501#true} call #t~ret127 := main(); {20501#true} is VALID [2018-11-18 23:29:22,670 INFO L273 TraceCheckUtils]: 5: Hoare triple {20501#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {20501#true} is VALID [2018-11-18 23:29:22,670 INFO L256 TraceCheckUtils]: 6: Hoare triple {20501#true} call _BLAST_init(); {20501#true} is VALID [2018-11-18 23:29:22,671 INFO L273 TraceCheckUtils]: 7: Hoare triple {20501#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20501#true} is VALID [2018-11-18 23:29:22,671 INFO L273 TraceCheckUtils]: 8: Hoare triple {20501#true} assume true; {20501#true} is VALID [2018-11-18 23:29:22,671 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {20501#true} {20501#true} #697#return; {20501#true} is VALID [2018-11-18 23:29:22,672 INFO L273 TraceCheckUtils]: 10: Hoare triple {20501#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {20501#true} is VALID [2018-11-18 23:29:22,672 INFO L273 TraceCheckUtils]: 11: Hoare triple {20501#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {20501#true} is VALID [2018-11-18 23:29:22,673 INFO L256 TraceCheckUtils]: 12: Hoare triple {20501#true} call stub_driver_init(); {20501#true} is VALID [2018-11-18 23:29:22,673 INFO L273 TraceCheckUtils]: 13: Hoare triple {20501#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {20501#true} is VALID [2018-11-18 23:29:22,673 INFO L273 TraceCheckUtils]: 14: Hoare triple {20501#true} assume true; {20501#true} is VALID [2018-11-18 23:29:22,673 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {20501#true} {20501#true} #699#return; {20501#true} is VALID [2018-11-18 23:29:22,673 INFO L273 TraceCheckUtils]: 16: Hoare triple {20501#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {20501#true} is VALID [2018-11-18 23:29:22,674 INFO L273 TraceCheckUtils]: 17: Hoare triple {20501#true} assume 0 == ~tmp_ndt_1~0; {20501#true} is VALID [2018-11-18 23:29:22,674 INFO L256 TraceCheckUtils]: 18: Hoare triple {20501#true} call #t~ret108 := DiskPerfCreate(~devobj~0, ~pirp~0); {20501#true} is VALID [2018-11-18 23:29:22,674 INFO L273 TraceCheckUtils]: 19: Hoare triple {20501#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~myStatus~0 := 0; {20501#true} is VALID [2018-11-18 23:29:22,674 INFO L256 TraceCheckUtils]: 20: Hoare triple {20501#true} call IofCompleteRequest(~Irp, 0); {20501#true} is VALID [2018-11-18 23:29:22,675 INFO L273 TraceCheckUtils]: 21: Hoare triple {20501#true} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {20501#true} is VALID [2018-11-18 23:29:22,675 INFO L273 TraceCheckUtils]: 22: Hoare triple {20501#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {20501#true} is VALID [2018-11-18 23:29:22,675 INFO L273 TraceCheckUtils]: 23: Hoare triple {20501#true} assume true; {20501#true} is VALID [2018-11-18 23:29:22,675 INFO L268 TraceCheckUtils]: 24: Hoare quadruple {20501#true} {20501#true} #793#return; {20501#true} is VALID [2018-11-18 23:29:22,676 INFO L273 TraceCheckUtils]: 25: Hoare triple {20501#true} #res := 0; {20503#(= 0 |DiskPerfCreate_#res|)} is VALID [2018-11-18 23:29:22,680 INFO L273 TraceCheckUtils]: 26: Hoare triple {20503#(= 0 |DiskPerfCreate_#res|)} assume true; {20503#(= 0 |DiskPerfCreate_#res|)} is VALID [2018-11-18 23:29:22,680 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {20503#(= 0 |DiskPerfCreate_#res|)} {20501#true} #701#return; {20504#(= 0 |main_#t~ret108|)} is VALID [2018-11-18 23:29:22,681 INFO L273 TraceCheckUtils]: 28: Hoare triple {20504#(= 0 |main_#t~ret108|)} assume -2147483648 <= #t~ret108 && #t~ret108 <= 2147483647;~status~6 := #t~ret108;havoc #t~ret108; {20505#(= 0 main_~status~6)} is VALID [2018-11-18 23:29:22,681 INFO L273 TraceCheckUtils]: 29: Hoare triple {20505#(= 0 main_~status~6)} assume !(0 != ~we_should_unload~0); {20505#(= 0 main_~status~6)} is VALID [2018-11-18 23:29:22,682 INFO L273 TraceCheckUtils]: 30: Hoare triple {20505#(= 0 main_~status~6)} assume !(1 == ~pended~0); {20505#(= 0 main_~status~6)} is VALID [2018-11-18 23:29:22,682 INFO L273 TraceCheckUtils]: 31: Hoare triple {20505#(= 0 main_~status~6)} assume !(1 == ~pended~0); {20505#(= 0 main_~status~6)} is VALID [2018-11-18 23:29:22,682 INFO L273 TraceCheckUtils]: 32: Hoare triple {20505#(= 0 main_~status~6)} assume ~s~0 != ~UNLOADED~0; {20505#(= 0 main_~status~6)} is VALID [2018-11-18 23:29:22,683 INFO L273 TraceCheckUtils]: 33: Hoare triple {20505#(= 0 main_~status~6)} assume -1 != ~status~6; {20505#(= 0 main_~status~6)} is VALID [2018-11-18 23:29:22,683 INFO L273 TraceCheckUtils]: 34: Hoare triple {20505#(= 0 main_~status~6)} assume !(~s~0 != ~SKIP2~0); {20505#(= 0 main_~status~6)} is VALID [2018-11-18 23:29:22,683 INFO L273 TraceCheckUtils]: 35: Hoare triple {20505#(= 0 main_~status~6)} assume !(1 == ~pended~0); {20505#(= 0 main_~status~6)} is VALID [2018-11-18 23:29:22,684 INFO L273 TraceCheckUtils]: 36: Hoare triple {20505#(= 0 main_~status~6)} assume ~s~0 == ~DC~0; {20505#(= 0 main_~status~6)} is VALID [2018-11-18 23:29:22,685 INFO L273 TraceCheckUtils]: 37: Hoare triple {20505#(= 0 main_~status~6)} assume 259 == ~status~6; {20502#false} is VALID [2018-11-18 23:29:22,685 INFO L256 TraceCheckUtils]: 38: Hoare triple {20502#false} call errorFn(); {20502#false} is VALID [2018-11-18 23:29:22,686 INFO L273 TraceCheckUtils]: 39: Hoare triple {20502#false} assume !false; {20502#false} is VALID [2018-11-18 23:29:22,687 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:29:22,687 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:29:22,688 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 23:29:22,688 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 40 [2018-11-18 23:29:22,688 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:29:22,688 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2018-11-18 23:29:22,758 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 40 edges. 40 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:22,758 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-18 23:29:22,758 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 23:29:22,758 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:29:22,759 INFO L87 Difference]: Start difference. First operand 1044 states and 1547 transitions. Second operand 5 states. [2018-11-18 23:29:26,973 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:26,973 INFO L93 Difference]: Finished difference Result 1059 states and 1565 transitions. [2018-11-18 23:29:26,973 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 23:29:26,973 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 40 [2018-11-18 23:29:26,974 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:29:26,974 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 23:29:26,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 376 transitions. [2018-11-18 23:29:26,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 23:29:26,982 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 376 transitions. [2018-11-18 23:29:26,982 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 376 transitions. [2018-11-18 23:29:27,395 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 376 edges. 376 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:27,479 INFO L225 Difference]: With dead ends: 1059 [2018-11-18 23:29:27,480 INFO L226 Difference]: Without dead ends: 1037 [2018-11-18 23:29:27,481 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:29:27,482 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1037 states. [2018-11-18 23:29:28,879 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1037 to 1037. [2018-11-18 23:29:28,879 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:29:28,879 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1037 states. Second operand 1037 states. [2018-11-18 23:29:28,879 INFO L74 IsIncluded]: Start isIncluded. First operand 1037 states. Second operand 1037 states. [2018-11-18 23:29:28,879 INFO L87 Difference]: Start difference. First operand 1037 states. Second operand 1037 states. [2018-11-18 23:29:28,953 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:28,953 INFO L93 Difference]: Finished difference Result 1037 states and 1538 transitions. [2018-11-18 23:29:28,953 INFO L276 IsEmpty]: Start isEmpty. Operand 1037 states and 1538 transitions. [2018-11-18 23:29:28,960 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:28,960 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:28,960 INFO L74 IsIncluded]: Start isIncluded. First operand 1037 states. Second operand 1037 states. [2018-11-18 23:29:28,961 INFO L87 Difference]: Start difference. First operand 1037 states. Second operand 1037 states. [2018-11-18 23:29:29,037 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:29,037 INFO L93 Difference]: Finished difference Result 1037 states and 1538 transitions. [2018-11-18 23:29:29,037 INFO L276 IsEmpty]: Start isEmpty. Operand 1037 states and 1538 transitions. [2018-11-18 23:29:29,043 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:29,043 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:29,043 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:29:29,043 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:29:29,044 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1037 states. [2018-11-18 23:29:29,125 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1037 states to 1037 states and 1538 transitions. [2018-11-18 23:29:29,126 INFO L78 Accepts]: Start accepts. Automaton has 1037 states and 1538 transitions. Word has length 40 [2018-11-18 23:29:29,126 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:29:29,126 INFO L480 AbstractCegarLoop]: Abstraction has 1037 states and 1538 transitions. [2018-11-18 23:29:29,126 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-18 23:29:29,126 INFO L276 IsEmpty]: Start isEmpty. Operand 1037 states and 1538 transitions. [2018-11-18 23:29:29,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-18 23:29:29,128 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:29:29,128 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:29:29,128 INFO L423 AbstractCegarLoop]: === Iteration 8 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:29:29,129 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:29:29,129 INFO L82 PathProgramCache]: Analyzing trace with hash 707123725, now seen corresponding path program 1 times [2018-11-18 23:29:29,129 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:29:29,129 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:29:29,130 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:29,130 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:29:29,131 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:29,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:29:29,331 INFO L256 TraceCheckUtils]: 0: Hoare triple {25394#true} call ULTIMATE.init(); {25394#true} is VALID [2018-11-18 23:29:29,331 INFO L273 TraceCheckUtils]: 1: Hoare triple {25394#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {25394#true} is VALID [2018-11-18 23:29:29,332 INFO L273 TraceCheckUtils]: 2: Hoare triple {25394#true} assume true; {25394#true} is VALID [2018-11-18 23:29:29,332 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {25394#true} {25394#true} #813#return; {25394#true} is VALID [2018-11-18 23:29:29,332 INFO L256 TraceCheckUtils]: 4: Hoare triple {25394#true} call #t~ret127 := main(); {25394#true} is VALID [2018-11-18 23:29:29,332 INFO L273 TraceCheckUtils]: 5: Hoare triple {25394#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {25394#true} is VALID [2018-11-18 23:29:29,332 INFO L256 TraceCheckUtils]: 6: Hoare triple {25394#true} call _BLAST_init(); {25394#true} is VALID [2018-11-18 23:29:29,333 INFO L273 TraceCheckUtils]: 7: Hoare triple {25394#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25394#true} is VALID [2018-11-18 23:29:29,333 INFO L273 TraceCheckUtils]: 8: Hoare triple {25394#true} assume true; {25394#true} is VALID [2018-11-18 23:29:29,333 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {25394#true} {25394#true} #697#return; {25394#true} is VALID [2018-11-18 23:29:29,333 INFO L273 TraceCheckUtils]: 10: Hoare triple {25394#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {25394#true} is VALID [2018-11-18 23:29:29,333 INFO L273 TraceCheckUtils]: 11: Hoare triple {25394#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {25394#true} is VALID [2018-11-18 23:29:29,333 INFO L256 TraceCheckUtils]: 12: Hoare triple {25394#true} call stub_driver_init(); {25394#true} is VALID [2018-11-18 23:29:29,334 INFO L273 TraceCheckUtils]: 13: Hoare triple {25394#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {25394#true} is VALID [2018-11-18 23:29:29,334 INFO L273 TraceCheckUtils]: 14: Hoare triple {25394#true} assume true; {25394#true} is VALID [2018-11-18 23:29:29,334 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {25394#true} {25394#true} #699#return; {25394#true} is VALID [2018-11-18 23:29:29,334 INFO L273 TraceCheckUtils]: 16: Hoare triple {25394#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {25394#true} is VALID [2018-11-18 23:29:29,334 INFO L273 TraceCheckUtils]: 17: Hoare triple {25394#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {25394#true} is VALID [2018-11-18 23:29:29,334 INFO L273 TraceCheckUtils]: 18: Hoare triple {25394#true} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {25394#true} is VALID [2018-11-18 23:29:29,334 INFO L273 TraceCheckUtils]: 19: Hoare triple {25394#true} assume 3 == ~tmp_ndt_3~0; {25394#true} is VALID [2018-11-18 23:29:29,335 INFO L256 TraceCheckUtils]: 20: Hoare triple {25394#true} call #t~ret110 := DiskPerfDispatchPnp(~devobj~0, ~pirp~0); {25394#true} is VALID [2018-11-18 23:29:29,335 INFO L273 TraceCheckUtils]: 21: Hoare triple {25394#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet0;havoc #t~nondet0;assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647;~irpSp__MinorFunction~0 := #t~nondet1;havoc #t~nondet1;havoc ~irpSp~0;havoc ~status~0;havoc ~tmp~0;~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {25394#true} is VALID [2018-11-18 23:29:29,335 INFO L273 TraceCheckUtils]: 22: Hoare triple {25394#true} assume 0 == ~irpSp__MinorFunction~0; {25394#true} is VALID [2018-11-18 23:29:29,335 INFO L256 TraceCheckUtils]: 23: Hoare triple {25394#true} call #t~ret2 := DiskPerfStartDevice(~DeviceObject, ~Irp); {25394#true} is VALID [2018-11-18 23:29:29,335 INFO L273 TraceCheckUtils]: 24: Hoare triple {25394#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~deviceExtension__TargetDeviceObject~0 := #t~nondet7;havoc #t~nondet7;havoc ~Irp__IoStatus__Status~0;havoc ~deviceExtension~0;havoc ~status~1;~deviceExtension~0 := ~DeviceObject__DeviceExtension~0; {25394#true} is VALID [2018-11-18 23:29:29,336 INFO L256 TraceCheckUtils]: 25: Hoare triple {25394#true} call #t~ret8 := DiskPerfForwardIrpSynchronous(~DeviceObject, ~Irp); {25394#true} is VALID [2018-11-18 23:29:29,336 INFO L273 TraceCheckUtils]: 26: Hoare triple {25394#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~3 := #t~nondet27;havoc #t~nondet27;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~DeviceObject__DeviceExtension~4 := #t~nondet28;havoc #t~nondet28;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~deviceExtension__TargetDeviceObject~3 := #t~nondet29;havoc #t~nondet29;havoc ~deviceExtension~4;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~event~0 := #t~nondet30;havoc #t~nondet30;havoc ~status~3;havoc ~nextIrpSp__Control~0;havoc ~irpSp~1;havoc ~nextIrpSp~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~irpSp___0~0;havoc ~__cil_tmp15~0;~deviceExtension~4 := ~DeviceObject__DeviceExtension~4;~irpSp~1 := ~Irp__Tail__Overlay__CurrentStackLocation~3;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~3 - 1;~nextIrpSp__Control~0 := 0; {25394#true} is VALID [2018-11-18 23:29:29,336 INFO L273 TraceCheckUtils]: 27: Hoare triple {25394#true} assume !(~s~0 != ~NP~0); {25394#true} is VALID [2018-11-18 23:29:29,337 INFO L273 TraceCheckUtils]: 28: Hoare triple {25394#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~routine~0 := 0; {25396#(= ~routine~0 0)} is VALID [2018-11-18 23:29:29,338 INFO L273 TraceCheckUtils]: 29: Hoare triple {25396#(= ~routine~0 0)} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~3 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {25396#(= ~routine~0 0)} is VALID [2018-11-18 23:29:29,339 INFO L256 TraceCheckUtils]: 30: Hoare triple {25396#(= ~routine~0 0)} call #t~ret31 := IofCallDriver(~deviceExtension__TargetDeviceObject~3, ~Irp); {25396#(= ~routine~0 0)} is VALID [2018-11-18 23:29:29,340 INFO L273 TraceCheckUtils]: 31: Hoare triple {25396#(= ~routine~0 0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~lcontext~0 := #t~nondet115;havoc #t~nondet115;havoc ~__cil_tmp7~0; {25396#(= ~routine~0 0)} is VALID [2018-11-18 23:29:29,340 INFO L273 TraceCheckUtils]: 32: Hoare triple {25396#(= ~routine~0 0)} assume 0 != ~compRegistered~0; {25396#(= ~routine~0 0)} is VALID [2018-11-18 23:29:29,341 INFO L273 TraceCheckUtils]: 33: Hoare triple {25396#(= ~routine~0 0)} assume !(0 == ~routine~0); {25395#false} is VALID [2018-11-18 23:29:29,341 INFO L256 TraceCheckUtils]: 34: Hoare triple {25395#false} call #t~ret117 := DiskPerfIoCompletion(~DeviceObject, ~Irp, ~lcontext~0); {25395#false} is VALID [2018-11-18 23:29:29,341 INFO L273 TraceCheckUtils]: 35: Hoare triple {25395#false} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet33;havoc #t~nondet33;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~partitionCounters__BytesRead__QuadPart~0 := #t~nondet34;havoc #t~nondet34;assume -2147483648 <= #t~nondet35 && #t~nondet35 <= 2147483647;~Irp__IoStatus__Information~0 := #t~nondet35;havoc #t~nondet35;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~partitionCounters__ReadCount~0 := #t~nondet36;havoc #t~nondet36;assume -2147483648 <= #t~nondet37 && #t~nondet37 <= 2147483647;~partitionCounters__ReadTime__QuadPart~0 := #t~nondet37;havoc #t~nondet37;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~difference__QuadPart~0 := #t~nondet38;havoc #t~nondet38;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~partitionCounters__BytesWritten__QuadPart~0 := #t~nondet39;havoc #t~nondet39;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~partitionCounters__WriteCount~0 := #t~nondet40;havoc #t~nondet40;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~partitionCounters__WriteTime__QuadPart~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~Irp__Flags~0 := #t~nondet42;havoc #t~nondet42;assume -2147483648 <= #t~nondet43 && #t~nondet43 <= 2147483647;~partitionCounters__SplitCount~0 := #t~nondet43;havoc #t~nondet43;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__PendingReturned~0 := #t~nondet44;havoc #t~nondet44;havoc ~Irp__Tail__Overlay__CurrentStackLocation__Control~0;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~partitionCounters~0 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~queueLen~0 := #t~nondet46;havoc #t~nondet46; {25395#false} is VALID [2018-11-18 23:29:29,342 INFO L273 TraceCheckUtils]: 36: Hoare triple {25395#false} assume !(0 == ~partitionCounters~0); {25395#false} is VALID [2018-11-18 23:29:29,342 INFO L273 TraceCheckUtils]: 37: Hoare triple {25395#false} assume ~queueLen~0 < 0; {25395#false} is VALID [2018-11-18 23:29:29,342 INFO L273 TraceCheckUtils]: 38: Hoare triple {25395#false} assume 0 == ~queueLen~0; {25395#false} is VALID [2018-11-18 23:29:29,342 INFO L273 TraceCheckUtils]: 39: Hoare triple {25395#false} assume 3 == ~irpStack__MajorFunction~0;~partitionCounters__BytesRead__QuadPart~0 := ~partitionCounters__BytesRead__QuadPart~0 + ~Irp__IoStatus__Information~0;#t~post47 := ~partitionCounters__ReadCount~0;~partitionCounters__ReadCount~0 := 1 + #t~post47;havoc #t~post47;~partitionCounters__ReadTime__QuadPart~0 := ~partitionCounters__ReadTime__QuadPart~0 + ~difference__QuadPart~0; {25395#false} is VALID [2018-11-18 23:29:29,342 INFO L273 TraceCheckUtils]: 40: Hoare triple {25395#false} assume 8 != ~Irp__Flags~0;#t~post49 := ~partitionCounters__SplitCount~0;~partitionCounters__SplitCount~0 := 1 + #t~post49;havoc #t~post49; {25395#false} is VALID [2018-11-18 23:29:29,342 INFO L273 TraceCheckUtils]: 41: Hoare triple {25395#false} assume 0 != ~Irp__PendingReturned~0; {25395#false} is VALID [2018-11-18 23:29:29,343 INFO L273 TraceCheckUtils]: 42: Hoare triple {25395#false} assume !(0 == ~pended~0); {25395#false} is VALID [2018-11-18 23:29:29,343 INFO L256 TraceCheckUtils]: 43: Hoare triple {25395#false} call errorFn(); {25395#false} is VALID [2018-11-18 23:29:29,343 INFO L273 TraceCheckUtils]: 44: Hoare triple {25395#false} assume !false; {25395#false} is VALID [2018-11-18 23:29:29,344 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:29:29,344 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:29:29,345 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 23:29:29,345 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 45 [2018-11-18 23:29:29,345 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:29:29,345 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-18 23:29:29,396 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:29,397 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 23:29:29,397 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 23:29:29,397 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:29:29,397 INFO L87 Difference]: Start difference. First operand 1037 states and 1538 transitions. Second operand 3 states. [2018-11-18 23:29:30,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:30,838 INFO L93 Difference]: Finished difference Result 1449 states and 2196 transitions. [2018-11-18 23:29:30,838 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 23:29:30,838 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 45 [2018-11-18 23:29:30,838 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:29:30,839 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:29:30,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 554 transitions. [2018-11-18 23:29:30,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:29:30,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 554 transitions. [2018-11-18 23:29:30,850 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 554 transitions. [2018-11-18 23:29:31,894 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 554 edges. 554 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:31,926 INFO L225 Difference]: With dead ends: 1449 [2018-11-18 23:29:31,927 INFO L226 Difference]: Without dead ends: 579 [2018-11-18 23:29:31,933 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:29:31,934 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 579 states. [2018-11-18 23:29:35,029 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 579 to 579. [2018-11-18 23:29:35,030 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:29:35,030 INFO L82 GeneralOperation]: Start isEquivalent. First operand 579 states. Second operand 579 states. [2018-11-18 23:29:35,030 INFO L74 IsIncluded]: Start isIncluded. First operand 579 states. Second operand 579 states. [2018-11-18 23:29:35,030 INFO L87 Difference]: Start difference. First operand 579 states. Second operand 579 states. [2018-11-18 23:29:35,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:35,054 INFO L93 Difference]: Finished difference Result 579 states and 824 transitions. [2018-11-18 23:29:35,054 INFO L276 IsEmpty]: Start isEmpty. Operand 579 states and 824 transitions. [2018-11-18 23:29:35,056 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:35,056 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:35,056 INFO L74 IsIncluded]: Start isIncluded. First operand 579 states. Second operand 579 states. [2018-11-18 23:29:35,057 INFO L87 Difference]: Start difference. First operand 579 states. Second operand 579 states. [2018-11-18 23:29:35,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:35,084 INFO L93 Difference]: Finished difference Result 579 states and 824 transitions. [2018-11-18 23:29:35,084 INFO L276 IsEmpty]: Start isEmpty. Operand 579 states and 824 transitions. [2018-11-18 23:29:35,086 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:35,087 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:35,087 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:29:35,087 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:29:35,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 579 states. [2018-11-18 23:29:35,115 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 579 states to 579 states and 824 transitions. [2018-11-18 23:29:35,116 INFO L78 Accepts]: Start accepts. Automaton has 579 states and 824 transitions. Word has length 45 [2018-11-18 23:29:35,116 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:29:35,116 INFO L480 AbstractCegarLoop]: Abstraction has 579 states and 824 transitions. [2018-11-18 23:29:35,116 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 23:29:35,116 INFO L276 IsEmpty]: Start isEmpty. Operand 579 states and 824 transitions. [2018-11-18 23:29:35,117 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2018-11-18 23:29:35,117 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:29:35,117 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:29:35,117 INFO L423 AbstractCegarLoop]: === Iteration 9 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:29:35,118 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:29:35,118 INFO L82 PathProgramCache]: Analyzing trace with hash 1198649482, now seen corresponding path program 1 times [2018-11-18 23:29:35,118 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:29:35,118 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:29:35,119 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:35,119 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:29:35,119 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:35,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:29:35,413 INFO L256 TraceCheckUtils]: 0: Hoare triple {29287#true} call ULTIMATE.init(); {29287#true} is VALID [2018-11-18 23:29:35,413 INFO L273 TraceCheckUtils]: 1: Hoare triple {29287#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {29287#true} is VALID [2018-11-18 23:29:35,414 INFO L273 TraceCheckUtils]: 2: Hoare triple {29287#true} assume true; {29287#true} is VALID [2018-11-18 23:29:35,414 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {29287#true} {29287#true} #813#return; {29287#true} is VALID [2018-11-18 23:29:35,414 INFO L256 TraceCheckUtils]: 4: Hoare triple {29287#true} call #t~ret127 := main(); {29287#true} is VALID [2018-11-18 23:29:35,415 INFO L273 TraceCheckUtils]: 5: Hoare triple {29287#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {29287#true} is VALID [2018-11-18 23:29:35,415 INFO L256 TraceCheckUtils]: 6: Hoare triple {29287#true} call _BLAST_init(); {29287#true} is VALID [2018-11-18 23:29:35,416 INFO L273 TraceCheckUtils]: 7: Hoare triple {29287#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,416 INFO L273 TraceCheckUtils]: 8: Hoare triple {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} assume true; {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,417 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} {29287#true} #697#return; {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,417 INFO L273 TraceCheckUtils]: 10: Hoare triple {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,418 INFO L273 TraceCheckUtils]: 11: Hoare triple {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,418 INFO L256 TraceCheckUtils]: 12: Hoare triple {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} call stub_driver_init(); {29287#true} is VALID [2018-11-18 23:29:35,418 INFO L273 TraceCheckUtils]: 13: Hoare triple {29287#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {29287#true} is VALID [2018-11-18 23:29:35,418 INFO L273 TraceCheckUtils]: 14: Hoare triple {29287#true} assume true; {29287#true} is VALID [2018-11-18 23:29:35,419 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {29287#true} {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} #699#return; {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,420 INFO L273 TraceCheckUtils]: 16: Hoare triple {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,420 INFO L273 TraceCheckUtils]: 17: Hoare triple {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,420 INFO L273 TraceCheckUtils]: 18: Hoare triple {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} assume 2 == ~tmp_ndt_2~0; {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,421 INFO L256 TraceCheckUtils]: 19: Hoare triple {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} call #t~ret109 := DiskPerfDeviceControl(~devobj~0, ~pirp~0); {29287#true} is VALID [2018-11-18 23:29:35,421 INFO L273 TraceCheckUtils]: 20: Hoare triple {29287#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet50;havoc #t~nondet50;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~4 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~DeviceObject__DeviceExtension~5 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~deviceExtension__TargetDeviceObject~4 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__OutputBufferLength~0 := #t~nondet55;havoc #t~nondet55;assume -2147483648 <= #t~nondet56 && #t~nondet56 <= 2147483647;~sizeof__DISK_PERFORMANCE~0 := #t~nondet56;havoc #t~nondet56;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~deviceExtension__DiskCounters~0 := #t~nondet57;havoc #t~nondet57;assume -2147483648 <= #t~nondet58 && #t~nondet58 <= 2147483647;~Irp__AssociatedIrp__SystemBuffer~0 := #t~nondet58;havoc #t~nondet58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~deviceExtension__Processors~0 := #t~nondet59;havoc #t~nondet59;havoc ~totalCounters__QueueDepth~0;assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~deviceExtension__QueueDepth~0 := #t~nondet60;havoc #t~nondet60;havoc ~Irp__IoStatus__Status~2;havoc ~deviceExtension~5;havoc ~currentIrpStack~0;havoc ~status~4;havoc ~i~0;havoc ~totalCounters~0;havoc ~diskCounters~0;havoc ~tmp~3;havoc ~__cil_tmp24~0;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;~deviceExtension~5 := ~DeviceObject__DeviceExtension~5;~currentIrpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~4;~__cil_tmp24~0 := 32;~__cil_tmp25~0 := 458752;~__cil_tmp26~0 := 458784; {29287#true} is VALID [2018-11-18 23:29:35,421 INFO L273 TraceCheckUtils]: 21: Hoare triple {29287#true} assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp26~0; {29287#true} is VALID [2018-11-18 23:29:35,421 INFO L273 TraceCheckUtils]: 22: Hoare triple {29287#true} assume ~currentIrpStack__Parameters__DeviceIoControl__OutputBufferLength~0 < ~sizeof__DISK_PERFORMANCE~0;~status~4 := -1073741789;~Irp__IoStatus__Information~1 := 0; {29287#true} is VALID [2018-11-18 23:29:35,422 INFO L273 TraceCheckUtils]: 23: Hoare triple {29287#true} ~Irp__IoStatus__Status~2 := ~status~4;~myStatus~0 := ~status~4; {29287#true} is VALID [2018-11-18 23:29:35,422 INFO L256 TraceCheckUtils]: 24: Hoare triple {29287#true} call IofCompleteRequest(~Irp, 0); {29287#true} is VALID [2018-11-18 23:29:35,422 INFO L273 TraceCheckUtils]: 25: Hoare triple {29287#true} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {29287#true} is VALID [2018-11-18 23:29:35,433 INFO L273 TraceCheckUtils]: 26: Hoare triple {29287#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {29290#(<= ~s~0 ~DC~0)} is VALID [2018-11-18 23:29:35,433 INFO L273 TraceCheckUtils]: 27: Hoare triple {29290#(<= ~s~0 ~DC~0)} assume true; {29290#(<= ~s~0 ~DC~0)} is VALID [2018-11-18 23:29:35,434 INFO L268 TraceCheckUtils]: 28: Hoare quadruple {29290#(<= ~s~0 ~DC~0)} {29287#true} #785#return; {29290#(<= ~s~0 ~DC~0)} is VALID [2018-11-18 23:29:35,434 INFO L273 TraceCheckUtils]: 29: Hoare triple {29290#(<= ~s~0 ~DC~0)} #res := ~status~4; {29290#(<= ~s~0 ~DC~0)} is VALID [2018-11-18 23:29:35,435 INFO L273 TraceCheckUtils]: 30: Hoare triple {29290#(<= ~s~0 ~DC~0)} assume true; {29290#(<= ~s~0 ~DC~0)} is VALID [2018-11-18 23:29:35,436 INFO L268 TraceCheckUtils]: 31: Hoare quadruple {29290#(<= ~s~0 ~DC~0)} {29289#(<= (+ ~DC~0 2) ~SKIP2~0)} #703#return; {29291#(<= (+ ~s~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,436 INFO L273 TraceCheckUtils]: 32: Hoare triple {29291#(<= (+ ~s~0 2) ~SKIP2~0)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~6 := #t~ret109;havoc #t~ret109; {29291#(<= (+ ~s~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,438 INFO L273 TraceCheckUtils]: 33: Hoare triple {29291#(<= (+ ~s~0 2) ~SKIP2~0)} assume !(0 != ~we_should_unload~0); {29291#(<= (+ ~s~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,440 INFO L273 TraceCheckUtils]: 34: Hoare triple {29291#(<= (+ ~s~0 2) ~SKIP2~0)} assume !(1 == ~pended~0); {29291#(<= (+ ~s~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,440 INFO L273 TraceCheckUtils]: 35: Hoare triple {29291#(<= (+ ~s~0 2) ~SKIP2~0)} assume !(1 == ~pended~0); {29291#(<= (+ ~s~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,441 INFO L273 TraceCheckUtils]: 36: Hoare triple {29291#(<= (+ ~s~0 2) ~SKIP2~0)} assume ~s~0 != ~UNLOADED~0; {29291#(<= (+ ~s~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,441 INFO L273 TraceCheckUtils]: 37: Hoare triple {29291#(<= (+ ~s~0 2) ~SKIP2~0)} assume -1 != ~status~6; {29291#(<= (+ ~s~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:29:35,442 INFO L273 TraceCheckUtils]: 38: Hoare triple {29291#(<= (+ ~s~0 2) ~SKIP2~0)} assume !(~s~0 != ~SKIP2~0); {29288#false} is VALID [2018-11-18 23:29:35,442 INFO L273 TraceCheckUtils]: 39: Hoare triple {29288#false} assume !(1 == ~pended~0); {29288#false} is VALID [2018-11-18 23:29:35,442 INFO L273 TraceCheckUtils]: 40: Hoare triple {29288#false} assume ~s~0 == ~DC~0; {29288#false} is VALID [2018-11-18 23:29:35,442 INFO L273 TraceCheckUtils]: 41: Hoare triple {29288#false} assume 259 == ~status~6; {29288#false} is VALID [2018-11-18 23:29:35,442 INFO L256 TraceCheckUtils]: 42: Hoare triple {29288#false} call errorFn(); {29288#false} is VALID [2018-11-18 23:29:35,442 INFO L273 TraceCheckUtils]: 43: Hoare triple {29288#false} assume !false; {29288#false} is VALID [2018-11-18 23:29:35,444 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:29:35,444 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:29:35,444 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 23:29:35,445 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 44 [2018-11-18 23:29:35,445 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:29:35,445 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2018-11-18 23:29:35,499 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 44 edges. 44 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:35,499 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-18 23:29:35,499 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 23:29:35,499 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:29:35,500 INFO L87 Difference]: Start difference. First operand 579 states and 824 transitions. Second operand 5 states. [2018-11-18 23:29:38,294 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:38,294 INFO L93 Difference]: Finished difference Result 587 states and 830 transitions. [2018-11-18 23:29:38,294 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 23:29:38,294 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 44 [2018-11-18 23:29:38,294 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:29:38,294 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 23:29:38,297 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 349 transitions. [2018-11-18 23:29:38,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 23:29:38,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 349 transitions. [2018-11-18 23:29:38,300 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 349 transitions. [2018-11-18 23:29:38,780 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 349 edges. 349 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:38,802 INFO L225 Difference]: With dead ends: 587 [2018-11-18 23:29:38,802 INFO L226 Difference]: Without dead ends: 581 [2018-11-18 23:29:38,802 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-11-18 23:29:38,803 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 581 states. [2018-11-18 23:29:39,982 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 581 to 579. [2018-11-18 23:29:39,982 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:29:39,982 INFO L82 GeneralOperation]: Start isEquivalent. First operand 581 states. Second operand 579 states. [2018-11-18 23:29:39,982 INFO L74 IsIncluded]: Start isIncluded. First operand 581 states. Second operand 579 states. [2018-11-18 23:29:39,982 INFO L87 Difference]: Start difference. First operand 581 states. Second operand 579 states. [2018-11-18 23:29:40,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:40,009 INFO L93 Difference]: Finished difference Result 581 states and 824 transitions. [2018-11-18 23:29:40,009 INFO L276 IsEmpty]: Start isEmpty. Operand 581 states and 824 transitions. [2018-11-18 23:29:40,012 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:40,012 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:40,012 INFO L74 IsIncluded]: Start isIncluded. First operand 579 states. Second operand 581 states. [2018-11-18 23:29:40,012 INFO L87 Difference]: Start difference. First operand 579 states. Second operand 581 states. [2018-11-18 23:29:40,038 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:40,039 INFO L93 Difference]: Finished difference Result 581 states and 824 transitions. [2018-11-18 23:29:40,039 INFO L276 IsEmpty]: Start isEmpty. Operand 581 states and 824 transitions. [2018-11-18 23:29:40,041 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:40,042 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:40,042 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:29:40,042 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:29:40,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 579 states. [2018-11-18 23:29:40,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 579 states to 579 states and 823 transitions. [2018-11-18 23:29:40,063 INFO L78 Accepts]: Start accepts. Automaton has 579 states and 823 transitions. Word has length 44 [2018-11-18 23:29:40,063 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:29:40,064 INFO L480 AbstractCegarLoop]: Abstraction has 579 states and 823 transitions. [2018-11-18 23:29:40,064 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-18 23:29:40,064 INFO L276 IsEmpty]: Start isEmpty. Operand 579 states and 823 transitions. [2018-11-18 23:29:40,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-18 23:29:40,065 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:29:40,065 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:29:40,065 INFO L423 AbstractCegarLoop]: === Iteration 10 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:29:40,065 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:29:40,065 INFO L82 PathProgramCache]: Analyzing trace with hash 1909267454, now seen corresponding path program 1 times [2018-11-18 23:29:40,065 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:29:40,066 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:29:40,066 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:40,067 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:29:40,067 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:40,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:29:40,679 INFO L256 TraceCheckUtils]: 0: Hoare triple {32044#true} call ULTIMATE.init(); {32044#true} is VALID [2018-11-18 23:29:40,680 INFO L273 TraceCheckUtils]: 1: Hoare triple {32044#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {32044#true} is VALID [2018-11-18 23:29:40,680 INFO L273 TraceCheckUtils]: 2: Hoare triple {32044#true} assume true; {32044#true} is VALID [2018-11-18 23:29:40,680 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {32044#true} {32044#true} #813#return; {32044#true} is VALID [2018-11-18 23:29:40,681 INFO L256 TraceCheckUtils]: 4: Hoare triple {32044#true} call #t~ret127 := main(); {32044#true} is VALID [2018-11-18 23:29:40,681 INFO L273 TraceCheckUtils]: 5: Hoare triple {32044#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {32044#true} is VALID [2018-11-18 23:29:40,681 INFO L256 TraceCheckUtils]: 6: Hoare triple {32044#true} call _BLAST_init(); {32044#true} is VALID [2018-11-18 23:29:40,695 INFO L273 TraceCheckUtils]: 7: Hoare triple {32044#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32046#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,704 INFO L273 TraceCheckUtils]: 8: Hoare triple {32046#(<= (+ ~DC~0 5) ~IPC~0)} assume true; {32046#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,718 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {32046#(<= (+ ~DC~0 5) ~IPC~0)} {32044#true} #697#return; {32046#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,727 INFO L273 TraceCheckUtils]: 10: Hoare triple {32046#(<= (+ ~DC~0 5) ~IPC~0)} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {32046#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,739 INFO L273 TraceCheckUtils]: 11: Hoare triple {32046#(<= (+ ~DC~0 5) ~IPC~0)} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {32046#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,740 INFO L256 TraceCheckUtils]: 12: Hoare triple {32046#(<= (+ ~DC~0 5) ~IPC~0)} call stub_driver_init(); {32044#true} is VALID [2018-11-18 23:29:40,740 INFO L273 TraceCheckUtils]: 13: Hoare triple {32044#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {32044#true} is VALID [2018-11-18 23:29:40,740 INFO L273 TraceCheckUtils]: 14: Hoare triple {32044#true} assume true; {32044#true} is VALID [2018-11-18 23:29:40,755 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {32044#true} {32046#(<= (+ ~DC~0 5) ~IPC~0)} #699#return; {32046#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,764 INFO L273 TraceCheckUtils]: 16: Hoare triple {32046#(<= (+ ~DC~0 5) ~IPC~0)} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {32046#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,779 INFO L273 TraceCheckUtils]: 17: Hoare triple {32046#(<= (+ ~DC~0 5) ~IPC~0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {32046#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,785 INFO L273 TraceCheckUtils]: 18: Hoare triple {32046#(<= (+ ~DC~0 5) ~IPC~0)} assume 2 == ~tmp_ndt_2~0; {32046#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,785 INFO L256 TraceCheckUtils]: 19: Hoare triple {32046#(<= (+ ~DC~0 5) ~IPC~0)} call #t~ret109 := DiskPerfDeviceControl(~devobj~0, ~pirp~0); {32044#true} is VALID [2018-11-18 23:29:40,785 INFO L273 TraceCheckUtils]: 20: Hoare triple {32044#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet50;havoc #t~nondet50;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~4 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~DeviceObject__DeviceExtension~5 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~deviceExtension__TargetDeviceObject~4 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__OutputBufferLength~0 := #t~nondet55;havoc #t~nondet55;assume -2147483648 <= #t~nondet56 && #t~nondet56 <= 2147483647;~sizeof__DISK_PERFORMANCE~0 := #t~nondet56;havoc #t~nondet56;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~deviceExtension__DiskCounters~0 := #t~nondet57;havoc #t~nondet57;assume -2147483648 <= #t~nondet58 && #t~nondet58 <= 2147483647;~Irp__AssociatedIrp__SystemBuffer~0 := #t~nondet58;havoc #t~nondet58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~deviceExtension__Processors~0 := #t~nondet59;havoc #t~nondet59;havoc ~totalCounters__QueueDepth~0;assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~deviceExtension__QueueDepth~0 := #t~nondet60;havoc #t~nondet60;havoc ~Irp__IoStatus__Status~2;havoc ~deviceExtension~5;havoc ~currentIrpStack~0;havoc ~status~4;havoc ~i~0;havoc ~totalCounters~0;havoc ~diskCounters~0;havoc ~tmp~3;havoc ~__cil_tmp24~0;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;~deviceExtension~5 := ~DeviceObject__DeviceExtension~5;~currentIrpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~4;~__cil_tmp24~0 := 32;~__cil_tmp25~0 := 458752;~__cil_tmp26~0 := 458784; {32044#true} is VALID [2018-11-18 23:29:40,785 INFO L273 TraceCheckUtils]: 21: Hoare triple {32044#true} assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp26~0; {32044#true} is VALID [2018-11-18 23:29:40,786 INFO L273 TraceCheckUtils]: 22: Hoare triple {32044#true} assume ~currentIrpStack__Parameters__DeviceIoControl__OutputBufferLength~0 < ~sizeof__DISK_PERFORMANCE~0;~status~4 := -1073741789;~Irp__IoStatus__Information~1 := 0; {32044#true} is VALID [2018-11-18 23:29:40,786 INFO L273 TraceCheckUtils]: 23: Hoare triple {32044#true} ~Irp__IoStatus__Status~2 := ~status~4;~myStatus~0 := ~status~4; {32044#true} is VALID [2018-11-18 23:29:40,786 INFO L256 TraceCheckUtils]: 24: Hoare triple {32044#true} call IofCompleteRequest(~Irp, 0); {32044#true} is VALID [2018-11-18 23:29:40,786 INFO L273 TraceCheckUtils]: 25: Hoare triple {32044#true} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {32044#true} is VALID [2018-11-18 23:29:40,787 INFO L273 TraceCheckUtils]: 26: Hoare triple {32044#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {32047#(<= ~s~0 ~DC~0)} is VALID [2018-11-18 23:29:40,788 INFO L273 TraceCheckUtils]: 27: Hoare triple {32047#(<= ~s~0 ~DC~0)} assume true; {32047#(<= ~s~0 ~DC~0)} is VALID [2018-11-18 23:29:40,791 INFO L268 TraceCheckUtils]: 28: Hoare quadruple {32047#(<= ~s~0 ~DC~0)} {32044#true} #785#return; {32047#(<= ~s~0 ~DC~0)} is VALID [2018-11-18 23:29:40,791 INFO L273 TraceCheckUtils]: 29: Hoare triple {32047#(<= ~s~0 ~DC~0)} #res := ~status~4; {32047#(<= ~s~0 ~DC~0)} is VALID [2018-11-18 23:29:40,793 INFO L273 TraceCheckUtils]: 30: Hoare triple {32047#(<= ~s~0 ~DC~0)} assume true; {32047#(<= ~s~0 ~DC~0)} is VALID [2018-11-18 23:29:40,795 INFO L268 TraceCheckUtils]: 31: Hoare quadruple {32047#(<= ~s~0 ~DC~0)} {32046#(<= (+ ~DC~0 5) ~IPC~0)} #703#return; {32048#(<= (+ ~s~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,795 INFO L273 TraceCheckUtils]: 32: Hoare triple {32048#(<= (+ ~s~0 5) ~IPC~0)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~6 := #t~ret109;havoc #t~ret109; {32048#(<= (+ ~s~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,797 INFO L273 TraceCheckUtils]: 33: Hoare triple {32048#(<= (+ ~s~0 5) ~IPC~0)} assume !(0 != ~we_should_unload~0); {32048#(<= (+ ~s~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,797 INFO L273 TraceCheckUtils]: 34: Hoare triple {32048#(<= (+ ~s~0 5) ~IPC~0)} assume !(1 == ~pended~0); {32048#(<= (+ ~s~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,797 INFO L273 TraceCheckUtils]: 35: Hoare triple {32048#(<= (+ ~s~0 5) ~IPC~0)} assume !(1 == ~pended~0); {32048#(<= (+ ~s~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,808 INFO L273 TraceCheckUtils]: 36: Hoare triple {32048#(<= (+ ~s~0 5) ~IPC~0)} assume ~s~0 != ~UNLOADED~0; {32048#(<= (+ ~s~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,808 INFO L273 TraceCheckUtils]: 37: Hoare triple {32048#(<= (+ ~s~0 5) ~IPC~0)} assume -1 != ~status~6; {32048#(<= (+ ~s~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,815 INFO L273 TraceCheckUtils]: 38: Hoare triple {32048#(<= (+ ~s~0 5) ~IPC~0)} assume ~s~0 != ~SKIP2~0; {32048#(<= (+ ~s~0 5) ~IPC~0)} is VALID [2018-11-18 23:29:40,817 INFO L273 TraceCheckUtils]: 39: Hoare triple {32048#(<= (+ ~s~0 5) ~IPC~0)} assume !(~s~0 != ~IPC~0); {32045#false} is VALID [2018-11-18 23:29:40,817 INFO L273 TraceCheckUtils]: 40: Hoare triple {32045#false} assume !(1 == ~pended~0); {32045#false} is VALID [2018-11-18 23:29:40,817 INFO L273 TraceCheckUtils]: 41: Hoare triple {32045#false} assume ~s~0 == ~DC~0; {32045#false} is VALID [2018-11-18 23:29:40,818 INFO L273 TraceCheckUtils]: 42: Hoare triple {32045#false} assume 259 == ~status~6; {32045#false} is VALID [2018-11-18 23:29:40,818 INFO L256 TraceCheckUtils]: 43: Hoare triple {32045#false} call errorFn(); {32045#false} is VALID [2018-11-18 23:29:40,818 INFO L273 TraceCheckUtils]: 44: Hoare triple {32045#false} assume !false; {32045#false} is VALID [2018-11-18 23:29:40,820 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:29:40,820 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:29:40,820 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 23:29:40,820 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 45 [2018-11-18 23:29:40,820 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:29:40,820 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2018-11-18 23:29:40,870 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:40,870 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-18 23:29:40,870 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 23:29:40,871 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:29:40,871 INFO L87 Difference]: Start difference. First operand 579 states and 823 transitions. Second operand 5 states. [2018-11-18 23:29:43,760 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:43,760 INFO L93 Difference]: Finished difference Result 587 states and 829 transitions. [2018-11-18 23:29:43,760 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 23:29:43,760 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 45 [2018-11-18 23:29:43,761 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:29:43,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 23:29:43,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 348 transitions. [2018-11-18 23:29:43,764 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 23:29:43,767 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 348 transitions. [2018-11-18 23:29:43,767 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 348 transitions. [2018-11-18 23:29:44,323 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 348 edges. 348 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:44,352 INFO L225 Difference]: With dead ends: 587 [2018-11-18 23:29:44,352 INFO L226 Difference]: Without dead ends: 581 [2018-11-18 23:29:44,353 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-11-18 23:29:44,354 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 581 states. [2018-11-18 23:29:46,403 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 581 to 579. [2018-11-18 23:29:46,404 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:29:46,404 INFO L82 GeneralOperation]: Start isEquivalent. First operand 581 states. Second operand 579 states. [2018-11-18 23:29:46,404 INFO L74 IsIncluded]: Start isIncluded. First operand 581 states. Second operand 579 states. [2018-11-18 23:29:46,404 INFO L87 Difference]: Start difference. First operand 581 states. Second operand 579 states. [2018-11-18 23:29:46,425 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:46,425 INFO L93 Difference]: Finished difference Result 581 states and 823 transitions. [2018-11-18 23:29:46,425 INFO L276 IsEmpty]: Start isEmpty. Operand 581 states and 823 transitions. [2018-11-18 23:29:46,427 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:46,428 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:46,428 INFO L74 IsIncluded]: Start isIncluded. First operand 579 states. Second operand 581 states. [2018-11-18 23:29:46,428 INFO L87 Difference]: Start difference. First operand 579 states. Second operand 581 states. [2018-11-18 23:29:46,453 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:46,454 INFO L93 Difference]: Finished difference Result 581 states and 823 transitions. [2018-11-18 23:29:46,454 INFO L276 IsEmpty]: Start isEmpty. Operand 581 states and 823 transitions. [2018-11-18 23:29:46,456 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:46,457 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:46,457 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:29:46,457 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:29:46,457 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 579 states. [2018-11-18 23:29:46,483 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 579 states to 579 states and 822 transitions. [2018-11-18 23:29:46,483 INFO L78 Accepts]: Start accepts. Automaton has 579 states and 822 transitions. Word has length 45 [2018-11-18 23:29:46,484 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:29:46,484 INFO L480 AbstractCegarLoop]: Abstraction has 579 states and 822 transitions. [2018-11-18 23:29:46,484 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-18 23:29:46,484 INFO L276 IsEmpty]: Start isEmpty. Operand 579 states and 822 transitions. [2018-11-18 23:29:46,485 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-18 23:29:46,485 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:29:46,485 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:29:46,485 INFO L423 AbstractCegarLoop]: === Iteration 11 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:29:46,485 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:29:46,486 INFO L82 PathProgramCache]: Analyzing trace with hash -887211853, now seen corresponding path program 1 times [2018-11-18 23:29:46,486 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:29:46,486 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:29:46,487 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:46,487 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:29:46,487 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:46,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:29:46,963 INFO L256 TraceCheckUtils]: 0: Hoare triple {34801#true} call ULTIMATE.init(); {34801#true} is VALID [2018-11-18 23:29:46,963 INFO L273 TraceCheckUtils]: 1: Hoare triple {34801#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {34801#true} is VALID [2018-11-18 23:29:46,964 INFO L273 TraceCheckUtils]: 2: Hoare triple {34801#true} assume true; {34801#true} is VALID [2018-11-18 23:29:46,964 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {34801#true} {34801#true} #813#return; {34801#true} is VALID [2018-11-18 23:29:46,964 INFO L256 TraceCheckUtils]: 4: Hoare triple {34801#true} call #t~ret127 := main(); {34801#true} is VALID [2018-11-18 23:29:46,965 INFO L273 TraceCheckUtils]: 5: Hoare triple {34801#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {34801#true} is VALID [2018-11-18 23:29:46,965 INFO L256 TraceCheckUtils]: 6: Hoare triple {34801#true} call _BLAST_init(); {34801#true} is VALID [2018-11-18 23:29:46,965 INFO L273 TraceCheckUtils]: 7: Hoare triple {34801#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34801#true} is VALID [2018-11-18 23:29:46,965 INFO L273 TraceCheckUtils]: 8: Hoare triple {34801#true} assume true; {34801#true} is VALID [2018-11-18 23:29:46,965 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {34801#true} {34801#true} #697#return; {34801#true} is VALID [2018-11-18 23:29:46,966 INFO L273 TraceCheckUtils]: 10: Hoare triple {34801#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {34801#true} is VALID [2018-11-18 23:29:46,966 INFO L273 TraceCheckUtils]: 11: Hoare triple {34801#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {34801#true} is VALID [2018-11-18 23:29:46,966 INFO L256 TraceCheckUtils]: 12: Hoare triple {34801#true} call stub_driver_init(); {34801#true} is VALID [2018-11-18 23:29:46,966 INFO L273 TraceCheckUtils]: 13: Hoare triple {34801#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {34801#true} is VALID [2018-11-18 23:29:46,967 INFO L273 TraceCheckUtils]: 14: Hoare triple {34801#true} assume true; {34801#true} is VALID [2018-11-18 23:29:46,967 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {34801#true} {34801#true} #699#return; {34801#true} is VALID [2018-11-18 23:29:46,967 INFO L273 TraceCheckUtils]: 16: Hoare triple {34801#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {34801#true} is VALID [2018-11-18 23:29:46,967 INFO L273 TraceCheckUtils]: 17: Hoare triple {34801#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {34801#true} is VALID [2018-11-18 23:29:46,967 INFO L273 TraceCheckUtils]: 18: Hoare triple {34801#true} assume 2 == ~tmp_ndt_2~0; {34801#true} is VALID [2018-11-18 23:29:46,967 INFO L256 TraceCheckUtils]: 19: Hoare triple {34801#true} call #t~ret109 := DiskPerfDeviceControl(~devobj~0, ~pirp~0); {34801#true} is VALID [2018-11-18 23:29:46,968 INFO L273 TraceCheckUtils]: 20: Hoare triple {34801#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet50;havoc #t~nondet50;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~4 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~DeviceObject__DeviceExtension~5 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~deviceExtension__TargetDeviceObject~4 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__OutputBufferLength~0 := #t~nondet55;havoc #t~nondet55;assume -2147483648 <= #t~nondet56 && #t~nondet56 <= 2147483647;~sizeof__DISK_PERFORMANCE~0 := #t~nondet56;havoc #t~nondet56;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~deviceExtension__DiskCounters~0 := #t~nondet57;havoc #t~nondet57;assume -2147483648 <= #t~nondet58 && #t~nondet58 <= 2147483647;~Irp__AssociatedIrp__SystemBuffer~0 := #t~nondet58;havoc #t~nondet58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~deviceExtension__Processors~0 := #t~nondet59;havoc #t~nondet59;havoc ~totalCounters__QueueDepth~0;assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~deviceExtension__QueueDepth~0 := #t~nondet60;havoc #t~nondet60;havoc ~Irp__IoStatus__Status~2;havoc ~deviceExtension~5;havoc ~currentIrpStack~0;havoc ~status~4;havoc ~i~0;havoc ~totalCounters~0;havoc ~diskCounters~0;havoc ~tmp~3;havoc ~__cil_tmp24~0;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;~deviceExtension~5 := ~DeviceObject__DeviceExtension~5;~currentIrpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~4;~__cil_tmp24~0 := 32;~__cil_tmp25~0 := 458752;~__cil_tmp26~0 := 458784; {34801#true} is VALID [2018-11-18 23:29:46,968 INFO L273 TraceCheckUtils]: 21: Hoare triple {34801#true} assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp26~0; {34801#true} is VALID [2018-11-18 23:29:46,979 INFO L273 TraceCheckUtils]: 22: Hoare triple {34801#true} assume ~currentIrpStack__Parameters__DeviceIoControl__OutputBufferLength~0 < ~sizeof__DISK_PERFORMANCE~0;~status~4 := -1073741789;~Irp__IoStatus__Information~1 := 0; {34803#(<= (+ DiskPerfDeviceControl_~status~4 1073741789) 0)} is VALID [2018-11-18 23:29:46,979 INFO L273 TraceCheckUtils]: 23: Hoare triple {34803#(<= (+ DiskPerfDeviceControl_~status~4 1073741789) 0)} ~Irp__IoStatus__Status~2 := ~status~4;~myStatus~0 := ~status~4; {34803#(<= (+ DiskPerfDeviceControl_~status~4 1073741789) 0)} is VALID [2018-11-18 23:29:46,980 INFO L256 TraceCheckUtils]: 24: Hoare triple {34803#(<= (+ DiskPerfDeviceControl_~status~4 1073741789) 0)} call IofCompleteRequest(~Irp, 0); {34801#true} is VALID [2018-11-18 23:29:46,980 INFO L273 TraceCheckUtils]: 25: Hoare triple {34801#true} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {34801#true} is VALID [2018-11-18 23:29:46,980 INFO L273 TraceCheckUtils]: 26: Hoare triple {34801#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {34801#true} is VALID [2018-11-18 23:29:46,980 INFO L273 TraceCheckUtils]: 27: Hoare triple {34801#true} assume true; {34801#true} is VALID [2018-11-18 23:29:46,983 INFO L268 TraceCheckUtils]: 28: Hoare quadruple {34801#true} {34803#(<= (+ DiskPerfDeviceControl_~status~4 1073741789) 0)} #785#return; {34803#(<= (+ DiskPerfDeviceControl_~status~4 1073741789) 0)} is VALID [2018-11-18 23:29:46,983 INFO L273 TraceCheckUtils]: 29: Hoare triple {34803#(<= (+ DiskPerfDeviceControl_~status~4 1073741789) 0)} #res := ~status~4; {34804#(<= (+ |DiskPerfDeviceControl_#res| 1073741789) 0)} is VALID [2018-11-18 23:29:46,985 INFO L273 TraceCheckUtils]: 30: Hoare triple {34804#(<= (+ |DiskPerfDeviceControl_#res| 1073741789) 0)} assume true; {34804#(<= (+ |DiskPerfDeviceControl_#res| 1073741789) 0)} is VALID [2018-11-18 23:29:46,985 INFO L268 TraceCheckUtils]: 31: Hoare quadruple {34804#(<= (+ |DiskPerfDeviceControl_#res| 1073741789) 0)} {34801#true} #703#return; {34805#(<= (+ |main_#t~ret109| 1073741789) 0)} is VALID [2018-11-18 23:29:46,987 INFO L273 TraceCheckUtils]: 32: Hoare triple {34805#(<= (+ |main_#t~ret109| 1073741789) 0)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~6 := #t~ret109;havoc #t~ret109; {34806#(<= (+ main_~status~6 1073741789) 0)} is VALID [2018-11-18 23:29:46,987 INFO L273 TraceCheckUtils]: 33: Hoare triple {34806#(<= (+ main_~status~6 1073741789) 0)} assume !(0 != ~we_should_unload~0); {34806#(<= (+ main_~status~6 1073741789) 0)} is VALID [2018-11-18 23:29:46,989 INFO L273 TraceCheckUtils]: 34: Hoare triple {34806#(<= (+ main_~status~6 1073741789) 0)} assume !(1 == ~pended~0); {34806#(<= (+ main_~status~6 1073741789) 0)} is VALID [2018-11-18 23:29:46,989 INFO L273 TraceCheckUtils]: 35: Hoare triple {34806#(<= (+ main_~status~6 1073741789) 0)} assume !(1 == ~pended~0); {34806#(<= (+ main_~status~6 1073741789) 0)} is VALID [2018-11-18 23:29:46,991 INFO L273 TraceCheckUtils]: 36: Hoare triple {34806#(<= (+ main_~status~6 1073741789) 0)} assume ~s~0 != ~UNLOADED~0; {34806#(<= (+ main_~status~6 1073741789) 0)} is VALID [2018-11-18 23:29:46,991 INFO L273 TraceCheckUtils]: 37: Hoare triple {34806#(<= (+ main_~status~6 1073741789) 0)} assume -1 != ~status~6; {34806#(<= (+ main_~status~6 1073741789) 0)} is VALID [2018-11-18 23:29:46,993 INFO L273 TraceCheckUtils]: 38: Hoare triple {34806#(<= (+ main_~status~6 1073741789) 0)} assume ~s~0 != ~SKIP2~0; {34806#(<= (+ main_~status~6 1073741789) 0)} is VALID [2018-11-18 23:29:46,996 INFO L273 TraceCheckUtils]: 39: Hoare triple {34806#(<= (+ main_~status~6 1073741789) 0)} assume ~s~0 != ~IPC~0; {34806#(<= (+ main_~status~6 1073741789) 0)} is VALID [2018-11-18 23:29:46,996 INFO L273 TraceCheckUtils]: 40: Hoare triple {34806#(<= (+ main_~status~6 1073741789) 0)} assume !(~s~0 != ~DC~0); {34806#(<= (+ main_~status~6 1073741789) 0)} is VALID [2018-11-18 23:29:47,002 INFO L273 TraceCheckUtils]: 41: Hoare triple {34806#(<= (+ main_~status~6 1073741789) 0)} assume !(1 == ~pended~0); {34806#(<= (+ main_~status~6 1073741789) 0)} is VALID [2018-11-18 23:29:47,002 INFO L273 TraceCheckUtils]: 42: Hoare triple {34806#(<= (+ main_~status~6 1073741789) 0)} assume ~s~0 == ~DC~0; {34806#(<= (+ main_~status~6 1073741789) 0)} is VALID [2018-11-18 23:29:47,003 INFO L273 TraceCheckUtils]: 43: Hoare triple {34806#(<= (+ main_~status~6 1073741789) 0)} assume 259 == ~status~6; {34802#false} is VALID [2018-11-18 23:29:47,003 INFO L256 TraceCheckUtils]: 44: Hoare triple {34802#false} call errorFn(); {34802#false} is VALID [2018-11-18 23:29:47,003 INFO L273 TraceCheckUtils]: 45: Hoare triple {34802#false} assume !false; {34802#false} is VALID [2018-11-18 23:29:47,005 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:29:47,005 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:29:47,005 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 23:29:47,005 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 46 [2018-11-18 23:29:47,005 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:29:47,005 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2018-11-18 23:29:47,057 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:47,058 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-18 23:29:47,058 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-18 23:29:47,058 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-18 23:29:47,059 INFO L87 Difference]: Start difference. First operand 579 states and 822 transitions. Second operand 6 states. [2018-11-18 23:29:50,495 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:50,495 INFO L93 Difference]: Finished difference Result 602 states and 847 transitions. [2018-11-18 23:29:50,495 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-18 23:29:50,495 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 46 [2018-11-18 23:29:50,495 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:29:50,495 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-18 23:29:50,498 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 345 transitions. [2018-11-18 23:29:50,498 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-18 23:29:50,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 345 transitions. [2018-11-18 23:29:50,501 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 345 transitions. [2018-11-18 23:29:50,885 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 345 edges. 345 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:50,905 INFO L225 Difference]: With dead ends: 602 [2018-11-18 23:29:50,905 INFO L226 Difference]: Without dead ends: 577 [2018-11-18 23:29:50,906 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-18 23:29:50,907 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 577 states. [2018-11-18 23:29:51,922 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 577 to 577. [2018-11-18 23:29:51,922 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:29:51,922 INFO L82 GeneralOperation]: Start isEquivalent. First operand 577 states. Second operand 577 states. [2018-11-18 23:29:51,922 INFO L74 IsIncluded]: Start isIncluded. First operand 577 states. Second operand 577 states. [2018-11-18 23:29:51,922 INFO L87 Difference]: Start difference. First operand 577 states. Second operand 577 states. [2018-11-18 23:29:51,942 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:51,942 INFO L93 Difference]: Finished difference Result 577 states and 817 transitions. [2018-11-18 23:29:51,942 INFO L276 IsEmpty]: Start isEmpty. Operand 577 states and 817 transitions. [2018-11-18 23:29:51,944 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:51,944 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:51,944 INFO L74 IsIncluded]: Start isIncluded. First operand 577 states. Second operand 577 states. [2018-11-18 23:29:51,944 INFO L87 Difference]: Start difference. First operand 577 states. Second operand 577 states. [2018-11-18 23:29:51,963 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:51,963 INFO L93 Difference]: Finished difference Result 577 states and 817 transitions. [2018-11-18 23:29:51,963 INFO L276 IsEmpty]: Start isEmpty. Operand 577 states and 817 transitions. [2018-11-18 23:29:51,965 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:29:51,965 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:29:51,965 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:29:51,966 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:29:51,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 577 states. [2018-11-18 23:29:51,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 577 states to 577 states and 817 transitions. [2018-11-18 23:29:51,984 INFO L78 Accepts]: Start accepts. Automaton has 577 states and 817 transitions. Word has length 46 [2018-11-18 23:29:51,985 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:29:51,985 INFO L480 AbstractCegarLoop]: Abstraction has 577 states and 817 transitions. [2018-11-18 23:29:51,985 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-18 23:29:51,985 INFO L276 IsEmpty]: Start isEmpty. Operand 577 states and 817 transitions. [2018-11-18 23:29:51,985 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-18 23:29:51,985 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:29:51,985 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:29:51,986 INFO L423 AbstractCegarLoop]: === Iteration 12 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:29:51,986 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:29:51,986 INFO L82 PathProgramCache]: Analyzing trace with hash -394845821, now seen corresponding path program 1 times [2018-11-18 23:29:51,986 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:29:51,986 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:29:51,987 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:51,987 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:29:51,987 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:29:51,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:29:52,125 INFO L256 TraceCheckUtils]: 0: Hoare triple {37567#true} call ULTIMATE.init(); {37567#true} is VALID [2018-11-18 23:29:52,125 INFO L273 TraceCheckUtils]: 1: Hoare triple {37567#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {37567#true} is VALID [2018-11-18 23:29:52,125 INFO L273 TraceCheckUtils]: 2: Hoare triple {37567#true} assume true; {37567#true} is VALID [2018-11-18 23:29:52,126 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {37567#true} {37567#true} #813#return; {37567#true} is VALID [2018-11-18 23:29:52,126 INFO L256 TraceCheckUtils]: 4: Hoare triple {37567#true} call #t~ret127 := main(); {37567#true} is VALID [2018-11-18 23:29:52,126 INFO L273 TraceCheckUtils]: 5: Hoare triple {37567#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {37567#true} is VALID [2018-11-18 23:29:52,126 INFO L256 TraceCheckUtils]: 6: Hoare triple {37567#true} call _BLAST_init(); {37567#true} is VALID [2018-11-18 23:29:52,126 INFO L273 TraceCheckUtils]: 7: Hoare triple {37567#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {37567#true} is VALID [2018-11-18 23:29:52,126 INFO L273 TraceCheckUtils]: 8: Hoare triple {37567#true} assume true; {37567#true} is VALID [2018-11-18 23:29:52,126 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {37567#true} {37567#true} #697#return; {37567#true} is VALID [2018-11-18 23:29:52,127 INFO L273 TraceCheckUtils]: 10: Hoare triple {37567#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {37567#true} is VALID [2018-11-18 23:29:52,127 INFO L273 TraceCheckUtils]: 11: Hoare triple {37567#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {37567#true} is VALID [2018-11-18 23:29:52,127 INFO L256 TraceCheckUtils]: 12: Hoare triple {37567#true} call stub_driver_init(); {37567#true} is VALID [2018-11-18 23:29:52,127 INFO L273 TraceCheckUtils]: 13: Hoare triple {37567#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {37567#true} is VALID [2018-11-18 23:29:52,127 INFO L273 TraceCheckUtils]: 14: Hoare triple {37567#true} assume true; {37567#true} is VALID [2018-11-18 23:29:52,127 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {37567#true} {37567#true} #699#return; {37567#true} is VALID [2018-11-18 23:29:52,127 INFO L273 TraceCheckUtils]: 16: Hoare triple {37567#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {37567#true} is VALID [2018-11-18 23:29:52,128 INFO L273 TraceCheckUtils]: 17: Hoare triple {37567#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {37567#true} is VALID [2018-11-18 23:29:52,128 INFO L273 TraceCheckUtils]: 18: Hoare triple {37567#true} assume 2 == ~tmp_ndt_2~0; {37567#true} is VALID [2018-11-18 23:29:52,128 INFO L256 TraceCheckUtils]: 19: Hoare triple {37567#true} call #t~ret109 := DiskPerfDeviceControl(~devobj~0, ~pirp~0); {37567#true} is VALID [2018-11-18 23:29:52,128 INFO L273 TraceCheckUtils]: 20: Hoare triple {37567#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet50;havoc #t~nondet50;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~4 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~DeviceObject__DeviceExtension~5 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~deviceExtension__TargetDeviceObject~4 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__OutputBufferLength~0 := #t~nondet55;havoc #t~nondet55;assume -2147483648 <= #t~nondet56 && #t~nondet56 <= 2147483647;~sizeof__DISK_PERFORMANCE~0 := #t~nondet56;havoc #t~nondet56;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~deviceExtension__DiskCounters~0 := #t~nondet57;havoc #t~nondet57;assume -2147483648 <= #t~nondet58 && #t~nondet58 <= 2147483647;~Irp__AssociatedIrp__SystemBuffer~0 := #t~nondet58;havoc #t~nondet58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~deviceExtension__Processors~0 := #t~nondet59;havoc #t~nondet59;havoc ~totalCounters__QueueDepth~0;assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~deviceExtension__QueueDepth~0 := #t~nondet60;havoc #t~nondet60;havoc ~Irp__IoStatus__Status~2;havoc ~deviceExtension~5;havoc ~currentIrpStack~0;havoc ~status~4;havoc ~i~0;havoc ~totalCounters~0;havoc ~diskCounters~0;havoc ~tmp~3;havoc ~__cil_tmp24~0;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;~deviceExtension~5 := ~DeviceObject__DeviceExtension~5;~currentIrpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~4;~__cil_tmp24~0 := 32;~__cil_tmp25~0 := 458752;~__cil_tmp26~0 := 458784; {37567#true} is VALID [2018-11-18 23:29:52,129 INFO L273 TraceCheckUtils]: 21: Hoare triple {37567#true} assume !(~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp26~0);#t~post62 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post62;havoc #t~post62;#t~post63 := ~Irp__Tail__Overlay__CurrentStackLocation~4;~Irp__Tail__Overlay__CurrentStackLocation~4 := 1 + #t~post63;havoc #t~post63; {37567#true} is VALID [2018-11-18 23:29:52,129 INFO L256 TraceCheckUtils]: 22: Hoare triple {37567#true} call #t~ret64 := IofCallDriver(~deviceExtension__TargetDeviceObject~4, ~Irp); {37567#true} is VALID [2018-11-18 23:29:52,129 INFO L273 TraceCheckUtils]: 23: Hoare triple {37567#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~lcontext~0 := #t~nondet115;havoc #t~nondet115;havoc ~__cil_tmp7~0; {37567#true} is VALID [2018-11-18 23:29:52,129 INFO L273 TraceCheckUtils]: 24: Hoare triple {37567#true} assume !(0 != ~compRegistered~0); {37567#true} is VALID [2018-11-18 23:29:52,129 INFO L273 TraceCheckUtils]: 25: Hoare triple {37567#true} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet118 && #t~nondet118 <= 2147483647;~tmp_ndt_8~0 := #t~nondet118;havoc #t~nondet118; {37567#true} is VALID [2018-11-18 23:29:52,129 INFO L273 TraceCheckUtils]: 26: Hoare triple {37567#true} assume 0 == ~tmp_ndt_8~0; {37567#true} is VALID [2018-11-18 23:29:52,129 INFO L273 TraceCheckUtils]: 27: Hoare triple {37567#true} ~returnVal2~0 := 0; {37567#true} is VALID [2018-11-18 23:29:52,131 INFO L273 TraceCheckUtils]: 28: Hoare triple {37567#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {37569#(= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:29:52,131 INFO L273 TraceCheckUtils]: 29: Hoare triple {37569#(= ~IPC~0 ~s~0)} #res := ~returnVal2~0; {37569#(= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:29:52,133 INFO L273 TraceCheckUtils]: 30: Hoare triple {37569#(= ~IPC~0 ~s~0)} assume true; {37569#(= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:29:52,134 INFO L268 TraceCheckUtils]: 31: Hoare quadruple {37569#(= ~IPC~0 ~s~0)} {37567#true} #787#return; {37569#(= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:29:52,135 INFO L273 TraceCheckUtils]: 32: Hoare triple {37569#(= ~IPC~0 ~s~0)} assume -2147483648 <= #t~ret64 && #t~ret64 <= 2147483647;~tmp~3 := #t~ret64;havoc #t~ret64;#res := ~tmp~3; {37569#(= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:29:52,135 INFO L273 TraceCheckUtils]: 33: Hoare triple {37569#(= ~IPC~0 ~s~0)} assume true; {37569#(= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:29:52,137 INFO L268 TraceCheckUtils]: 34: Hoare quadruple {37569#(= ~IPC~0 ~s~0)} {37567#true} #703#return; {37569#(= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:29:52,137 INFO L273 TraceCheckUtils]: 35: Hoare triple {37569#(= ~IPC~0 ~s~0)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~6 := #t~ret109;havoc #t~ret109; {37569#(= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:29:52,137 INFO L273 TraceCheckUtils]: 36: Hoare triple {37569#(= ~IPC~0 ~s~0)} assume !(0 != ~we_should_unload~0); {37569#(= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:29:52,138 INFO L273 TraceCheckUtils]: 37: Hoare triple {37569#(= ~IPC~0 ~s~0)} assume !(1 == ~pended~0); {37569#(= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:29:52,139 INFO L273 TraceCheckUtils]: 38: Hoare triple {37569#(= ~IPC~0 ~s~0)} assume !(1 == ~pended~0); {37569#(= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:29:52,139 INFO L273 TraceCheckUtils]: 39: Hoare triple {37569#(= ~IPC~0 ~s~0)} assume ~s~0 != ~UNLOADED~0; {37569#(= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:29:52,142 INFO L273 TraceCheckUtils]: 40: Hoare triple {37569#(= ~IPC~0 ~s~0)} assume -1 != ~status~6; {37569#(= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:29:52,142 INFO L273 TraceCheckUtils]: 41: Hoare triple {37569#(= ~IPC~0 ~s~0)} assume ~s~0 != ~SKIP2~0; {37569#(= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:29:52,145 INFO L273 TraceCheckUtils]: 42: Hoare triple {37569#(= ~IPC~0 ~s~0)} assume ~s~0 != ~IPC~0; {37568#false} is VALID [2018-11-18 23:29:52,145 INFO L273 TraceCheckUtils]: 43: Hoare triple {37568#false} assume ~s~0 != ~DC~0; {37568#false} is VALID [2018-11-18 23:29:52,145 INFO L256 TraceCheckUtils]: 44: Hoare triple {37568#false} call errorFn(); {37568#false} is VALID [2018-11-18 23:29:52,145 INFO L273 TraceCheckUtils]: 45: Hoare triple {37568#false} assume !false; {37568#false} is VALID [2018-11-18 23:29:52,146 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:29:52,147 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:29:52,147 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 23:29:52,147 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 46 [2018-11-18 23:29:52,147 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:29:52,147 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-18 23:29:52,198 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:52,198 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 23:29:52,198 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 23:29:52,198 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:29:52,199 INFO L87 Difference]: Start difference. First operand 577 states and 817 transitions. Second operand 3 states. [2018-11-18 23:29:55,281 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:29:55,282 INFO L93 Difference]: Finished difference Result 811 states and 1202 transitions. [2018-11-18 23:29:55,282 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 23:29:55,282 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 46 [2018-11-18 23:29:55,282 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:29:55,282 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:29:55,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 543 transitions. [2018-11-18 23:29:55,287 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:29:55,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 543 transitions. [2018-11-18 23:29:55,292 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 543 transitions. [2018-11-18 23:29:57,734 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 543 edges. 543 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:29:57,790 INFO L225 Difference]: With dead ends: 811 [2018-11-18 23:29:57,790 INFO L226 Difference]: Without dead ends: 803 [2018-11-18 23:29:57,791 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:29:57,792 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 803 states. [2018-11-18 23:30:00,756 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 803 to 646. [2018-11-18 23:30:00,756 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:30:00,757 INFO L82 GeneralOperation]: Start isEquivalent. First operand 803 states. Second operand 646 states. [2018-11-18 23:30:00,757 INFO L74 IsIncluded]: Start isIncluded. First operand 803 states. Second operand 646 states. [2018-11-18 23:30:00,757 INFO L87 Difference]: Start difference. First operand 803 states. Second operand 646 states. [2018-11-18 23:30:00,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:00,791 INFO L93 Difference]: Finished difference Result 803 states and 1193 transitions. [2018-11-18 23:30:00,791 INFO L276 IsEmpty]: Start isEmpty. Operand 803 states and 1193 transitions. [2018-11-18 23:30:00,794 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:00,794 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:00,794 INFO L74 IsIncluded]: Start isIncluded. First operand 646 states. Second operand 803 states. [2018-11-18 23:30:00,794 INFO L87 Difference]: Start difference. First operand 646 states. Second operand 803 states. [2018-11-18 23:30:00,829 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:00,829 INFO L93 Difference]: Finished difference Result 803 states and 1193 transitions. [2018-11-18 23:30:00,829 INFO L276 IsEmpty]: Start isEmpty. Operand 803 states and 1193 transitions. [2018-11-18 23:30:00,832 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:00,832 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:00,832 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:30:00,832 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:30:00,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 646 states. [2018-11-18 23:30:00,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 646 states to 646 states and 920 transitions. [2018-11-18 23:30:00,854 INFO L78 Accepts]: Start accepts. Automaton has 646 states and 920 transitions. Word has length 46 [2018-11-18 23:30:00,854 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:30:00,854 INFO L480 AbstractCegarLoop]: Abstraction has 646 states and 920 transitions. [2018-11-18 23:30:00,854 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 23:30:00,854 INFO L276 IsEmpty]: Start isEmpty. Operand 646 states and 920 transitions. [2018-11-18 23:30:00,855 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-11-18 23:30:00,855 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:30:00,855 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:30:00,855 INFO L423 AbstractCegarLoop]: === Iteration 13 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:30:00,855 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:30:00,855 INFO L82 PathProgramCache]: Analyzing trace with hash 800744827, now seen corresponding path program 1 times [2018-11-18 23:30:00,855 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:30:00,855 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:30:00,856 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:00,856 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:30:00,856 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:00,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:30:01,096 INFO L256 TraceCheckUtils]: 0: Hoare triple {41149#true} call ULTIMATE.init(); {41149#true} is VALID [2018-11-18 23:30:01,097 INFO L273 TraceCheckUtils]: 1: Hoare triple {41149#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {41149#true} is VALID [2018-11-18 23:30:01,097 INFO L273 TraceCheckUtils]: 2: Hoare triple {41149#true} assume true; {41149#true} is VALID [2018-11-18 23:30:01,097 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {41149#true} {41149#true} #813#return; {41149#true} is VALID [2018-11-18 23:30:01,097 INFO L256 TraceCheckUtils]: 4: Hoare triple {41149#true} call #t~ret127 := main(); {41149#true} is VALID [2018-11-18 23:30:01,098 INFO L273 TraceCheckUtils]: 5: Hoare triple {41149#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {41149#true} is VALID [2018-11-18 23:30:01,098 INFO L256 TraceCheckUtils]: 6: Hoare triple {41149#true} call _BLAST_init(); {41149#true} is VALID [2018-11-18 23:30:01,098 INFO L273 TraceCheckUtils]: 7: Hoare triple {41149#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {41149#true} is VALID [2018-11-18 23:30:01,098 INFO L273 TraceCheckUtils]: 8: Hoare triple {41149#true} assume true; {41149#true} is VALID [2018-11-18 23:30:01,098 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {41149#true} {41149#true} #697#return; {41149#true} is VALID [2018-11-18 23:30:01,099 INFO L273 TraceCheckUtils]: 10: Hoare triple {41149#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {41149#true} is VALID [2018-11-18 23:30:01,099 INFO L273 TraceCheckUtils]: 11: Hoare triple {41149#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {41149#true} is VALID [2018-11-18 23:30:01,099 INFO L256 TraceCheckUtils]: 12: Hoare triple {41149#true} call stub_driver_init(); {41149#true} is VALID [2018-11-18 23:30:01,099 INFO L273 TraceCheckUtils]: 13: Hoare triple {41149#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {41149#true} is VALID [2018-11-18 23:30:01,100 INFO L273 TraceCheckUtils]: 14: Hoare triple {41149#true} assume true; {41149#true} is VALID [2018-11-18 23:30:01,100 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {41149#true} {41149#true} #699#return; {41149#true} is VALID [2018-11-18 23:30:01,100 INFO L273 TraceCheckUtils]: 16: Hoare triple {41149#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {41149#true} is VALID [2018-11-18 23:30:01,100 INFO L273 TraceCheckUtils]: 17: Hoare triple {41149#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {41149#true} is VALID [2018-11-18 23:30:01,101 INFO L273 TraceCheckUtils]: 18: Hoare triple {41149#true} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {41149#true} is VALID [2018-11-18 23:30:01,101 INFO L273 TraceCheckUtils]: 19: Hoare triple {41149#true} assume 3 == ~tmp_ndt_3~0; {41149#true} is VALID [2018-11-18 23:30:01,101 INFO L256 TraceCheckUtils]: 20: Hoare triple {41149#true} call #t~ret110 := DiskPerfDispatchPnp(~devobj~0, ~pirp~0); {41149#true} is VALID [2018-11-18 23:30:01,101 INFO L273 TraceCheckUtils]: 21: Hoare triple {41149#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet0;havoc #t~nondet0;assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647;~irpSp__MinorFunction~0 := #t~nondet1;havoc #t~nondet1;havoc ~irpSp~0;havoc ~status~0;havoc ~tmp~0;~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {41149#true} is VALID [2018-11-18 23:30:01,101 INFO L273 TraceCheckUtils]: 22: Hoare triple {41149#true} assume 0 == ~irpSp__MinorFunction~0; {41149#true} is VALID [2018-11-18 23:30:01,101 INFO L256 TraceCheckUtils]: 23: Hoare triple {41149#true} call #t~ret2 := DiskPerfStartDevice(~DeviceObject, ~Irp); {41149#true} is VALID [2018-11-18 23:30:01,101 INFO L273 TraceCheckUtils]: 24: Hoare triple {41149#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~deviceExtension__TargetDeviceObject~0 := #t~nondet7;havoc #t~nondet7;havoc ~Irp__IoStatus__Status~0;havoc ~deviceExtension~0;havoc ~status~1;~deviceExtension~0 := ~DeviceObject__DeviceExtension~0; {41149#true} is VALID [2018-11-18 23:30:01,101 INFO L256 TraceCheckUtils]: 25: Hoare triple {41149#true} call #t~ret8 := DiskPerfForwardIrpSynchronous(~DeviceObject, ~Irp); {41149#true} is VALID [2018-11-18 23:30:01,102 INFO L273 TraceCheckUtils]: 26: Hoare triple {41149#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~3 := #t~nondet27;havoc #t~nondet27;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~DeviceObject__DeviceExtension~4 := #t~nondet28;havoc #t~nondet28;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~deviceExtension__TargetDeviceObject~3 := #t~nondet29;havoc #t~nondet29;havoc ~deviceExtension~4;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~event~0 := #t~nondet30;havoc #t~nondet30;havoc ~status~3;havoc ~nextIrpSp__Control~0;havoc ~irpSp~1;havoc ~nextIrpSp~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~irpSp___0~0;havoc ~__cil_tmp15~0;~deviceExtension~4 := ~DeviceObject__DeviceExtension~4;~irpSp~1 := ~Irp__Tail__Overlay__CurrentStackLocation~3;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~3 - 1;~nextIrpSp__Control~0 := 0; {41149#true} is VALID [2018-11-18 23:30:01,102 INFO L273 TraceCheckUtils]: 27: Hoare triple {41149#true} assume !(~s~0 != ~NP~0); {41149#true} is VALID [2018-11-18 23:30:01,102 INFO L273 TraceCheckUtils]: 28: Hoare triple {41149#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~routine~0 := 0; {41151#(<= 1 ~compRegistered~0)} is VALID [2018-11-18 23:30:01,103 INFO L273 TraceCheckUtils]: 29: Hoare triple {41151#(<= 1 ~compRegistered~0)} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~3 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {41151#(<= 1 ~compRegistered~0)} is VALID [2018-11-18 23:30:01,103 INFO L256 TraceCheckUtils]: 30: Hoare triple {41151#(<= 1 ~compRegistered~0)} call #t~ret31 := IofCallDriver(~deviceExtension__TargetDeviceObject~3, ~Irp); {41149#true} is VALID [2018-11-18 23:30:01,103 INFO L273 TraceCheckUtils]: 31: Hoare triple {41149#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~lcontext~0 := #t~nondet115;havoc #t~nondet115;havoc ~__cil_tmp7~0; {41149#true} is VALID [2018-11-18 23:30:01,103 INFO L273 TraceCheckUtils]: 32: Hoare triple {41149#true} assume !(0 != ~compRegistered~0); {41152#(<= ~compRegistered~0 0)} is VALID [2018-11-18 23:30:01,104 INFO L273 TraceCheckUtils]: 33: Hoare triple {41152#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet118 && #t~nondet118 <= 2147483647;~tmp_ndt_8~0 := #t~nondet118;havoc #t~nondet118; {41152#(<= ~compRegistered~0 0)} is VALID [2018-11-18 23:30:01,104 INFO L273 TraceCheckUtils]: 34: Hoare triple {41152#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_8~0; {41152#(<= ~compRegistered~0 0)} is VALID [2018-11-18 23:30:01,104 INFO L273 TraceCheckUtils]: 35: Hoare triple {41152#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {41152#(<= ~compRegistered~0 0)} is VALID [2018-11-18 23:30:01,104 INFO L273 TraceCheckUtils]: 36: Hoare triple {41152#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {41152#(<= ~compRegistered~0 0)} is VALID [2018-11-18 23:30:01,105 INFO L273 TraceCheckUtils]: 37: Hoare triple {41152#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {41152#(<= ~compRegistered~0 0)} is VALID [2018-11-18 23:30:01,105 INFO L273 TraceCheckUtils]: 38: Hoare triple {41152#(<= ~compRegistered~0 0)} assume true; {41152#(<= ~compRegistered~0 0)} is VALID [2018-11-18 23:30:01,106 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {41152#(<= ~compRegistered~0 0)} {41151#(<= 1 ~compRegistered~0)} #755#return; {41150#false} is VALID [2018-11-18 23:30:01,106 INFO L273 TraceCheckUtils]: 40: Hoare triple {41150#false} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~3 := #t~ret31;havoc #t~ret31;~__cil_tmp15~0 := ~status~3; {41150#false} is VALID [2018-11-18 23:30:01,107 INFO L273 TraceCheckUtils]: 41: Hoare triple {41150#false} assume 259 == ~__cil_tmp15~0; {41150#false} is VALID [2018-11-18 23:30:01,107 INFO L256 TraceCheckUtils]: 42: Hoare triple {41150#false} call #t~ret32 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {41150#false} is VALID [2018-11-18 23:30:01,107 INFO L273 TraceCheckUtils]: 43: Hoare triple {41150#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {41150#false} is VALID [2018-11-18 23:30:01,107 INFO L273 TraceCheckUtils]: 44: Hoare triple {41150#false} assume !(~s~0 == ~MPR3~0); {41150#false} is VALID [2018-11-18 23:30:01,108 INFO L273 TraceCheckUtils]: 45: Hoare triple {41150#false} assume !(1 == ~customIrp~0); {41150#false} is VALID [2018-11-18 23:30:01,108 INFO L273 TraceCheckUtils]: 46: Hoare triple {41150#false} assume ~s~0 == ~MPR3~0; {41150#false} is VALID [2018-11-18 23:30:01,108 INFO L256 TraceCheckUtils]: 47: Hoare triple {41150#false} call errorFn(); {41150#false} is VALID [2018-11-18 23:30:01,108 INFO L273 TraceCheckUtils]: 48: Hoare triple {41150#false} assume !false; {41150#false} is VALID [2018-11-18 23:30:01,110 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:30:01,110 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:30:01,110 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:30:01,110 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 49 [2018-11-18 23:30:01,111 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:30:01,111 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:30:01,164 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:01,165 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:30:01,165 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:30:01,165 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:30:01,165 INFO L87 Difference]: Start difference. First operand 646 states and 920 transitions. Second operand 4 states. [2018-11-18 23:30:03,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:03,876 INFO L93 Difference]: Finished difference Result 720 states and 993 transitions. [2018-11-18 23:30:03,876 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:30:03,876 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 49 [2018-11-18 23:30:03,877 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:30:03,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:30:03,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 539 transitions. [2018-11-18 23:30:03,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:30:03,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 539 transitions. [2018-11-18 23:30:03,884 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 539 transitions. [2018-11-18 23:30:04,478 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 539 edges. 539 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:04,493 INFO L225 Difference]: With dead ends: 720 [2018-11-18 23:30:04,493 INFO L226 Difference]: Without dead ends: 453 [2018-11-18 23:30:04,495 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:30:04,496 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 453 states. [2018-11-18 23:30:05,382 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 453 to 432. [2018-11-18 23:30:05,382 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:30:05,382 INFO L82 GeneralOperation]: Start isEquivalent. First operand 453 states. Second operand 432 states. [2018-11-18 23:30:05,382 INFO L74 IsIncluded]: Start isIncluded. First operand 453 states. Second operand 432 states. [2018-11-18 23:30:05,382 INFO L87 Difference]: Start difference. First operand 453 states. Second operand 432 states. [2018-11-18 23:30:05,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:05,395 INFO L93 Difference]: Finished difference Result 453 states and 585 transitions. [2018-11-18 23:30:05,395 INFO L276 IsEmpty]: Start isEmpty. Operand 453 states and 585 transitions. [2018-11-18 23:30:05,396 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:05,396 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:05,396 INFO L74 IsIncluded]: Start isIncluded. First operand 432 states. Second operand 453 states. [2018-11-18 23:30:05,396 INFO L87 Difference]: Start difference. First operand 432 states. Second operand 453 states. [2018-11-18 23:30:05,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:05,408 INFO L93 Difference]: Finished difference Result 453 states and 585 transitions. [2018-11-18 23:30:05,408 INFO L276 IsEmpty]: Start isEmpty. Operand 453 states and 585 transitions. [2018-11-18 23:30:05,409 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:05,410 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:05,410 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:30:05,410 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:30:05,410 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 432 states. [2018-11-18 23:30:05,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 432 states to 432 states and 564 transitions. [2018-11-18 23:30:05,426 INFO L78 Accepts]: Start accepts. Automaton has 432 states and 564 transitions. Word has length 49 [2018-11-18 23:30:05,426 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:30:05,426 INFO L480 AbstractCegarLoop]: Abstraction has 432 states and 564 transitions. [2018-11-18 23:30:05,426 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:30:05,426 INFO L276 IsEmpty]: Start isEmpty. Operand 432 states and 564 transitions. [2018-11-18 23:30:05,427 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2018-11-18 23:30:05,427 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:30:05,427 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:30:05,427 INFO L423 AbstractCegarLoop]: === Iteration 14 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:30:05,427 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:30:05,427 INFO L82 PathProgramCache]: Analyzing trace with hash 1097683735, now seen corresponding path program 1 times [2018-11-18 23:30:05,428 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:30:05,428 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:30:05,428 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:05,429 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:30:05,429 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:05,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:30:05,565 INFO L256 TraceCheckUtils]: 0: Hoare triple {43618#true} call ULTIMATE.init(); {43618#true} is VALID [2018-11-18 23:30:05,565 INFO L273 TraceCheckUtils]: 1: Hoare triple {43618#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {43618#true} is VALID [2018-11-18 23:30:05,565 INFO L273 TraceCheckUtils]: 2: Hoare triple {43618#true} assume true; {43618#true} is VALID [2018-11-18 23:30:05,566 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {43618#true} {43618#true} #813#return; {43618#true} is VALID [2018-11-18 23:30:05,566 INFO L256 TraceCheckUtils]: 4: Hoare triple {43618#true} call #t~ret127 := main(); {43618#true} is VALID [2018-11-18 23:30:05,566 INFO L273 TraceCheckUtils]: 5: Hoare triple {43618#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {43618#true} is VALID [2018-11-18 23:30:05,566 INFO L256 TraceCheckUtils]: 6: Hoare triple {43618#true} call _BLAST_init(); {43618#true} is VALID [2018-11-18 23:30:05,567 INFO L273 TraceCheckUtils]: 7: Hoare triple {43618#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {43618#true} is VALID [2018-11-18 23:30:05,567 INFO L273 TraceCheckUtils]: 8: Hoare triple {43618#true} assume true; {43618#true} is VALID [2018-11-18 23:30:05,568 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {43618#true} {43618#true} #697#return; {43618#true} is VALID [2018-11-18 23:30:05,568 INFO L273 TraceCheckUtils]: 10: Hoare triple {43618#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {43618#true} is VALID [2018-11-18 23:30:05,568 INFO L273 TraceCheckUtils]: 11: Hoare triple {43618#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {43618#true} is VALID [2018-11-18 23:30:05,568 INFO L256 TraceCheckUtils]: 12: Hoare triple {43618#true} call stub_driver_init(); {43618#true} is VALID [2018-11-18 23:30:05,569 INFO L273 TraceCheckUtils]: 13: Hoare triple {43618#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {43618#true} is VALID [2018-11-18 23:30:05,569 INFO L273 TraceCheckUtils]: 14: Hoare triple {43618#true} assume true; {43618#true} is VALID [2018-11-18 23:30:05,569 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {43618#true} {43618#true} #699#return; {43618#true} is VALID [2018-11-18 23:30:05,569 INFO L273 TraceCheckUtils]: 16: Hoare triple {43618#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {43618#true} is VALID [2018-11-18 23:30:05,569 INFO L273 TraceCheckUtils]: 17: Hoare triple {43618#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {43618#true} is VALID [2018-11-18 23:30:05,570 INFO L273 TraceCheckUtils]: 18: Hoare triple {43618#true} assume 2 == ~tmp_ndt_2~0; {43618#true} is VALID [2018-11-18 23:30:05,570 INFO L256 TraceCheckUtils]: 19: Hoare triple {43618#true} call #t~ret109 := DiskPerfDeviceControl(~devobj~0, ~pirp~0); {43618#true} is VALID [2018-11-18 23:30:05,570 INFO L273 TraceCheckUtils]: 20: Hoare triple {43618#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet50;havoc #t~nondet50;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~4 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~DeviceObject__DeviceExtension~5 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~deviceExtension__TargetDeviceObject~4 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__OutputBufferLength~0 := #t~nondet55;havoc #t~nondet55;assume -2147483648 <= #t~nondet56 && #t~nondet56 <= 2147483647;~sizeof__DISK_PERFORMANCE~0 := #t~nondet56;havoc #t~nondet56;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~deviceExtension__DiskCounters~0 := #t~nondet57;havoc #t~nondet57;assume -2147483648 <= #t~nondet58 && #t~nondet58 <= 2147483647;~Irp__AssociatedIrp__SystemBuffer~0 := #t~nondet58;havoc #t~nondet58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~deviceExtension__Processors~0 := #t~nondet59;havoc #t~nondet59;havoc ~totalCounters__QueueDepth~0;assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~deviceExtension__QueueDepth~0 := #t~nondet60;havoc #t~nondet60;havoc ~Irp__IoStatus__Status~2;havoc ~deviceExtension~5;havoc ~currentIrpStack~0;havoc ~status~4;havoc ~i~0;havoc ~totalCounters~0;havoc ~diskCounters~0;havoc ~tmp~3;havoc ~__cil_tmp24~0;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;~deviceExtension~5 := ~DeviceObject__DeviceExtension~5;~currentIrpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~4;~__cil_tmp24~0 := 32;~__cil_tmp25~0 := 458752;~__cil_tmp26~0 := 458784; {43618#true} is VALID [2018-11-18 23:30:05,570 INFO L273 TraceCheckUtils]: 21: Hoare triple {43618#true} assume !(~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp26~0);#t~post62 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post62;havoc #t~post62;#t~post63 := ~Irp__Tail__Overlay__CurrentStackLocation~4;~Irp__Tail__Overlay__CurrentStackLocation~4 := 1 + #t~post63;havoc #t~post63; {43618#true} is VALID [2018-11-18 23:30:05,570 INFO L256 TraceCheckUtils]: 22: Hoare triple {43618#true} call #t~ret64 := IofCallDriver(~deviceExtension__TargetDeviceObject~4, ~Irp); {43618#true} is VALID [2018-11-18 23:30:05,571 INFO L273 TraceCheckUtils]: 23: Hoare triple {43618#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~lcontext~0 := #t~nondet115;havoc #t~nondet115;havoc ~__cil_tmp7~0; {43618#true} is VALID [2018-11-18 23:30:05,571 INFO L273 TraceCheckUtils]: 24: Hoare triple {43618#true} assume !(0 != ~compRegistered~0); {43618#true} is VALID [2018-11-18 23:30:05,571 INFO L273 TraceCheckUtils]: 25: Hoare triple {43618#true} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet118 && #t~nondet118 <= 2147483647;~tmp_ndt_8~0 := #t~nondet118;havoc #t~nondet118; {43618#true} is VALID [2018-11-18 23:30:05,571 INFO L273 TraceCheckUtils]: 26: Hoare triple {43618#true} assume 0 == ~tmp_ndt_8~0; {43618#true} is VALID [2018-11-18 23:30:05,571 INFO L273 TraceCheckUtils]: 27: Hoare triple {43618#true} ~returnVal2~0 := 0; {43618#true} is VALID [2018-11-18 23:30:05,588 INFO L273 TraceCheckUtils]: 28: Hoare triple {43618#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {43620#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2018-11-18 23:30:05,591 INFO L273 TraceCheckUtils]: 29: Hoare triple {43620#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {43621#(= ~lowerDriverReturn~0 |IofCallDriver_#res|)} is VALID [2018-11-18 23:30:05,591 INFO L273 TraceCheckUtils]: 30: Hoare triple {43621#(= ~lowerDriverReturn~0 |IofCallDriver_#res|)} assume true; {43621#(= ~lowerDriverReturn~0 |IofCallDriver_#res|)} is VALID [2018-11-18 23:30:05,592 INFO L268 TraceCheckUtils]: 31: Hoare quadruple {43621#(= ~lowerDriverReturn~0 |IofCallDriver_#res|)} {43618#true} #787#return; {43622#(= ~lowerDriverReturn~0 |DiskPerfDeviceControl_#t~ret64|)} is VALID [2018-11-18 23:30:05,596 INFO L273 TraceCheckUtils]: 32: Hoare triple {43622#(= ~lowerDriverReturn~0 |DiskPerfDeviceControl_#t~ret64|)} assume -2147483648 <= #t~ret64 && #t~ret64 <= 2147483647;~tmp~3 := #t~ret64;havoc #t~ret64;#res := ~tmp~3; {43623#(= ~lowerDriverReturn~0 |DiskPerfDeviceControl_#res|)} is VALID [2018-11-18 23:30:05,596 INFO L273 TraceCheckUtils]: 33: Hoare triple {43623#(= ~lowerDriverReturn~0 |DiskPerfDeviceControl_#res|)} assume true; {43623#(= ~lowerDriverReturn~0 |DiskPerfDeviceControl_#res|)} is VALID [2018-11-18 23:30:05,597 INFO L268 TraceCheckUtils]: 34: Hoare quadruple {43623#(= ~lowerDriverReturn~0 |DiskPerfDeviceControl_#res|)} {43618#true} #703#return; {43624#(= ~lowerDriverReturn~0 |main_#t~ret109|)} is VALID [2018-11-18 23:30:05,598 INFO L273 TraceCheckUtils]: 35: Hoare triple {43624#(= ~lowerDriverReturn~0 |main_#t~ret109|)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~6 := #t~ret109;havoc #t~ret109; {43625#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:05,598 INFO L273 TraceCheckUtils]: 36: Hoare triple {43625#(= main_~status~6 ~lowerDriverReturn~0)} assume !(0 != ~we_should_unload~0); {43625#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:05,600 INFO L273 TraceCheckUtils]: 37: Hoare triple {43625#(= main_~status~6 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {43625#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:05,600 INFO L273 TraceCheckUtils]: 38: Hoare triple {43625#(= main_~status~6 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {43625#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:05,601 INFO L273 TraceCheckUtils]: 39: Hoare triple {43625#(= main_~status~6 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {43625#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:05,601 INFO L273 TraceCheckUtils]: 40: Hoare triple {43625#(= main_~status~6 ~lowerDriverReturn~0)} assume -1 != ~status~6; {43625#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:05,601 INFO L273 TraceCheckUtils]: 41: Hoare triple {43625#(= main_~status~6 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {43625#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:05,602 INFO L273 TraceCheckUtils]: 42: Hoare triple {43625#(= main_~status~6 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {43625#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:05,602 INFO L273 TraceCheckUtils]: 43: Hoare triple {43625#(= main_~status~6 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {43625#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:05,602 INFO L273 TraceCheckUtils]: 44: Hoare triple {43625#(= main_~status~6 ~lowerDriverReturn~0)} assume ~status~6 != ~lowerDriverReturn~0; {43619#false} is VALID [2018-11-18 23:30:05,603 INFO L256 TraceCheckUtils]: 45: Hoare triple {43619#false} call errorFn(); {43619#false} is VALID [2018-11-18 23:30:05,603 INFO L273 TraceCheckUtils]: 46: Hoare triple {43619#false} assume !false; {43619#false} is VALID [2018-11-18 23:30:05,604 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:30:05,605 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:30:05,605 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-18 23:30:05,605 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 47 [2018-11-18 23:30:05,605 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:30:05,606 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2018-11-18 23:30:05,659 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:05,659 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-18 23:30:05,659 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 23:30:05,659 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-18 23:30:05,660 INFO L87 Difference]: Start difference. First operand 432 states and 564 transitions. Second operand 8 states. [2018-11-18 23:30:09,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:09,076 INFO L93 Difference]: Finished difference Result 448 states and 583 transitions. [2018-11-18 23:30:09,076 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-18 23:30:09,076 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 47 [2018-11-18 23:30:09,076 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:30:09,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-18 23:30:09,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 337 transitions. [2018-11-18 23:30:09,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-18 23:30:09,082 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 337 transitions. [2018-11-18 23:30:09,082 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 337 transitions. [2018-11-18 23:30:09,432 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 337 edges. 337 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:09,445 INFO L225 Difference]: With dead ends: 448 [2018-11-18 23:30:09,445 INFO L226 Difference]: Without dead ends: 444 [2018-11-18 23:30:09,446 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2018-11-18 23:30:09,447 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 444 states. [2018-11-18 23:30:11,259 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 444 to 440. [2018-11-18 23:30:11,259 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:30:11,260 INFO L82 GeneralOperation]: Start isEquivalent. First operand 444 states. Second operand 440 states. [2018-11-18 23:30:11,260 INFO L74 IsIncluded]: Start isIncluded. First operand 444 states. Second operand 440 states. [2018-11-18 23:30:11,260 INFO L87 Difference]: Start difference. First operand 444 states. Second operand 440 states. [2018-11-18 23:30:11,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:11,279 INFO L93 Difference]: Finished difference Result 444 states and 579 transitions. [2018-11-18 23:30:11,279 INFO L276 IsEmpty]: Start isEmpty. Operand 444 states and 579 transitions. [2018-11-18 23:30:11,280 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:11,280 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:11,281 INFO L74 IsIncluded]: Start isIncluded. First operand 440 states. Second operand 444 states. [2018-11-18 23:30:11,281 INFO L87 Difference]: Start difference. First operand 440 states. Second operand 444 states. [2018-11-18 23:30:11,296 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:11,296 INFO L93 Difference]: Finished difference Result 444 states and 579 transitions. [2018-11-18 23:30:11,297 INFO L276 IsEmpty]: Start isEmpty. Operand 444 states and 579 transitions. [2018-11-18 23:30:11,298 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:11,298 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:11,298 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:30:11,298 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:30:11,299 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 440 states. [2018-11-18 23:30:11,312 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 440 states to 440 states and 575 transitions. [2018-11-18 23:30:11,312 INFO L78 Accepts]: Start accepts. Automaton has 440 states and 575 transitions. Word has length 47 [2018-11-18 23:30:11,312 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:30:11,312 INFO L480 AbstractCegarLoop]: Abstraction has 440 states and 575 transitions. [2018-11-18 23:30:11,312 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-18 23:30:11,312 INFO L276 IsEmpty]: Start isEmpty. Operand 440 states and 575 transitions. [2018-11-18 23:30:11,313 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2018-11-18 23:30:11,313 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:30:11,313 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:30:11,313 INFO L423 AbstractCegarLoop]: === Iteration 15 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:30:11,313 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:30:11,313 INFO L82 PathProgramCache]: Analyzing trace with hash 1097406905, now seen corresponding path program 1 times [2018-11-18 23:30:11,313 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:30:11,314 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:30:11,314 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:11,314 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:30:11,314 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:11,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:30:11,651 INFO L256 TraceCheckUtils]: 0: Hoare triple {45724#true} call ULTIMATE.init(); {45724#true} is VALID [2018-11-18 23:30:11,651 INFO L273 TraceCheckUtils]: 1: Hoare triple {45724#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {45724#true} is VALID [2018-11-18 23:30:11,652 INFO L273 TraceCheckUtils]: 2: Hoare triple {45724#true} assume true; {45724#true} is VALID [2018-11-18 23:30:11,652 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {45724#true} {45724#true} #813#return; {45724#true} is VALID [2018-11-18 23:30:11,652 INFO L256 TraceCheckUtils]: 4: Hoare triple {45724#true} call #t~ret127 := main(); {45724#true} is VALID [2018-11-18 23:30:11,652 INFO L273 TraceCheckUtils]: 5: Hoare triple {45724#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {45724#true} is VALID [2018-11-18 23:30:11,652 INFO L256 TraceCheckUtils]: 6: Hoare triple {45724#true} call _BLAST_init(); {45724#true} is VALID [2018-11-18 23:30:11,653 INFO L273 TraceCheckUtils]: 7: Hoare triple {45724#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {45724#true} is VALID [2018-11-18 23:30:11,653 INFO L273 TraceCheckUtils]: 8: Hoare triple {45724#true} assume true; {45724#true} is VALID [2018-11-18 23:30:11,653 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {45724#true} {45724#true} #697#return; {45724#true} is VALID [2018-11-18 23:30:11,653 INFO L273 TraceCheckUtils]: 10: Hoare triple {45724#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {45724#true} is VALID [2018-11-18 23:30:11,653 INFO L273 TraceCheckUtils]: 11: Hoare triple {45724#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {45724#true} is VALID [2018-11-18 23:30:11,654 INFO L256 TraceCheckUtils]: 12: Hoare triple {45724#true} call stub_driver_init(); {45724#true} is VALID [2018-11-18 23:30:11,654 INFO L273 TraceCheckUtils]: 13: Hoare triple {45724#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {45724#true} is VALID [2018-11-18 23:30:11,654 INFO L273 TraceCheckUtils]: 14: Hoare triple {45724#true} assume true; {45724#true} is VALID [2018-11-18 23:30:11,654 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {45724#true} {45724#true} #699#return; {45724#true} is VALID [2018-11-18 23:30:11,654 INFO L273 TraceCheckUtils]: 16: Hoare triple {45724#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {45724#true} is VALID [2018-11-18 23:30:11,655 INFO L273 TraceCheckUtils]: 17: Hoare triple {45724#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {45724#true} is VALID [2018-11-18 23:30:11,655 INFO L273 TraceCheckUtils]: 18: Hoare triple {45724#true} assume 2 == ~tmp_ndt_2~0; {45724#true} is VALID [2018-11-18 23:30:11,655 INFO L256 TraceCheckUtils]: 19: Hoare triple {45724#true} call #t~ret109 := DiskPerfDeviceControl(~devobj~0, ~pirp~0); {45724#true} is VALID [2018-11-18 23:30:11,655 INFO L273 TraceCheckUtils]: 20: Hoare triple {45724#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet50;havoc #t~nondet50;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~4 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~DeviceObject__DeviceExtension~5 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~deviceExtension__TargetDeviceObject~4 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__OutputBufferLength~0 := #t~nondet55;havoc #t~nondet55;assume -2147483648 <= #t~nondet56 && #t~nondet56 <= 2147483647;~sizeof__DISK_PERFORMANCE~0 := #t~nondet56;havoc #t~nondet56;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~deviceExtension__DiskCounters~0 := #t~nondet57;havoc #t~nondet57;assume -2147483648 <= #t~nondet58 && #t~nondet58 <= 2147483647;~Irp__AssociatedIrp__SystemBuffer~0 := #t~nondet58;havoc #t~nondet58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~deviceExtension__Processors~0 := #t~nondet59;havoc #t~nondet59;havoc ~totalCounters__QueueDepth~0;assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~deviceExtension__QueueDepth~0 := #t~nondet60;havoc #t~nondet60;havoc ~Irp__IoStatus__Status~2;havoc ~deviceExtension~5;havoc ~currentIrpStack~0;havoc ~status~4;havoc ~i~0;havoc ~totalCounters~0;havoc ~diskCounters~0;havoc ~tmp~3;havoc ~__cil_tmp24~0;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;~deviceExtension~5 := ~DeviceObject__DeviceExtension~5;~currentIrpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~4;~__cil_tmp24~0 := 32;~__cil_tmp25~0 := 458752;~__cil_tmp26~0 := 458784; {45724#true} is VALID [2018-11-18 23:30:11,655 INFO L273 TraceCheckUtils]: 21: Hoare triple {45724#true} assume !(~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp26~0);#t~post62 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post62;havoc #t~post62;#t~post63 := ~Irp__Tail__Overlay__CurrentStackLocation~4;~Irp__Tail__Overlay__CurrentStackLocation~4 := 1 + #t~post63;havoc #t~post63; {45724#true} is VALID [2018-11-18 23:30:11,655 INFO L256 TraceCheckUtils]: 22: Hoare triple {45724#true} call #t~ret64 := IofCallDriver(~deviceExtension__TargetDeviceObject~4, ~Irp); {45724#true} is VALID [2018-11-18 23:30:11,656 INFO L273 TraceCheckUtils]: 23: Hoare triple {45724#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~lcontext~0 := #t~nondet115;havoc #t~nondet115;havoc ~__cil_tmp7~0; {45724#true} is VALID [2018-11-18 23:30:11,656 INFO L273 TraceCheckUtils]: 24: Hoare triple {45724#true} assume !(0 != ~compRegistered~0); {45724#true} is VALID [2018-11-18 23:30:11,656 INFO L273 TraceCheckUtils]: 25: Hoare triple {45724#true} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet118 && #t~nondet118 <= 2147483647;~tmp_ndt_8~0 := #t~nondet118;havoc #t~nondet118; {45724#true} is VALID [2018-11-18 23:30:11,656 INFO L273 TraceCheckUtils]: 26: Hoare triple {45724#true} assume 0 == ~tmp_ndt_8~0; {45724#true} is VALID [2018-11-18 23:30:11,665 INFO L273 TraceCheckUtils]: 27: Hoare triple {45724#true} ~returnVal2~0 := 0; {45726#(= 0 IofCallDriver_~returnVal2~0)} is VALID [2018-11-18 23:30:11,666 INFO L273 TraceCheckUtils]: 28: Hoare triple {45726#(= 0 IofCallDriver_~returnVal2~0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {45726#(= 0 IofCallDriver_~returnVal2~0)} is VALID [2018-11-18 23:30:11,666 INFO L273 TraceCheckUtils]: 29: Hoare triple {45726#(= 0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {45727#(= 0 |IofCallDriver_#res|)} is VALID [2018-11-18 23:30:11,667 INFO L273 TraceCheckUtils]: 30: Hoare triple {45727#(= 0 |IofCallDriver_#res|)} assume true; {45727#(= 0 |IofCallDriver_#res|)} is VALID [2018-11-18 23:30:11,667 INFO L268 TraceCheckUtils]: 31: Hoare quadruple {45727#(= 0 |IofCallDriver_#res|)} {45724#true} #787#return; {45728#(= 0 |DiskPerfDeviceControl_#t~ret64|)} is VALID [2018-11-18 23:30:11,668 INFO L273 TraceCheckUtils]: 32: Hoare triple {45728#(= 0 |DiskPerfDeviceControl_#t~ret64|)} assume -2147483648 <= #t~ret64 && #t~ret64 <= 2147483647;~tmp~3 := #t~ret64;havoc #t~ret64;#res := ~tmp~3; {45729#(= 0 |DiskPerfDeviceControl_#res|)} is VALID [2018-11-18 23:30:11,668 INFO L273 TraceCheckUtils]: 33: Hoare triple {45729#(= 0 |DiskPerfDeviceControl_#res|)} assume true; {45729#(= 0 |DiskPerfDeviceControl_#res|)} is VALID [2018-11-18 23:30:11,669 INFO L268 TraceCheckUtils]: 34: Hoare quadruple {45729#(= 0 |DiskPerfDeviceControl_#res|)} {45724#true} #703#return; {45730#(= 0 |main_#t~ret109|)} is VALID [2018-11-18 23:30:11,669 INFO L273 TraceCheckUtils]: 35: Hoare triple {45730#(= 0 |main_#t~ret109|)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~6 := #t~ret109;havoc #t~ret109; {45731#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:11,670 INFO L273 TraceCheckUtils]: 36: Hoare triple {45731#(= 0 main_~status~6)} assume !(0 != ~we_should_unload~0); {45731#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:11,670 INFO L273 TraceCheckUtils]: 37: Hoare triple {45731#(= 0 main_~status~6)} assume !(1 == ~pended~0); {45731#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:11,671 INFO L273 TraceCheckUtils]: 38: Hoare triple {45731#(= 0 main_~status~6)} assume !(1 == ~pended~0); {45731#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:11,671 INFO L273 TraceCheckUtils]: 39: Hoare triple {45731#(= 0 main_~status~6)} assume ~s~0 != ~UNLOADED~0; {45731#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:11,672 INFO L273 TraceCheckUtils]: 40: Hoare triple {45731#(= 0 main_~status~6)} assume -1 != ~status~6; {45731#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:11,672 INFO L273 TraceCheckUtils]: 41: Hoare triple {45731#(= 0 main_~status~6)} assume !(~s~0 != ~SKIP2~0); {45731#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:11,672 INFO L273 TraceCheckUtils]: 42: Hoare triple {45731#(= 0 main_~status~6)} assume !(1 == ~pended~0); {45731#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:11,673 INFO L273 TraceCheckUtils]: 43: Hoare triple {45731#(= 0 main_~status~6)} assume ~s~0 == ~DC~0; {45731#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:11,674 INFO L273 TraceCheckUtils]: 44: Hoare triple {45731#(= 0 main_~status~6)} assume 259 == ~status~6; {45725#false} is VALID [2018-11-18 23:30:11,674 INFO L256 TraceCheckUtils]: 45: Hoare triple {45725#false} call errorFn(); {45725#false} is VALID [2018-11-18 23:30:11,674 INFO L273 TraceCheckUtils]: 46: Hoare triple {45725#false} assume !false; {45725#false} is VALID [2018-11-18 23:30:11,676 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:30:11,676 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:30:11,676 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-18 23:30:11,677 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 47 [2018-11-18 23:30:11,677 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:30:11,677 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2018-11-18 23:30:11,730 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:11,730 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-18 23:30:11,731 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 23:30:11,731 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-18 23:30:11,732 INFO L87 Difference]: Start difference. First operand 440 states and 575 transitions. Second operand 8 states. [2018-11-18 23:30:14,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:14,541 INFO L93 Difference]: Finished difference Result 761 states and 1041 transitions. [2018-11-18 23:30:14,541 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-18 23:30:14,541 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 47 [2018-11-18 23:30:14,541 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:30:14,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-18 23:30:14,548 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 565 transitions. [2018-11-18 23:30:14,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-18 23:30:14,553 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 565 transitions. [2018-11-18 23:30:14,553 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 565 transitions. [2018-11-18 23:30:15,132 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 565 edges. 565 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:15,158 INFO L225 Difference]: With dead ends: 761 [2018-11-18 23:30:15,159 INFO L226 Difference]: Without dead ends: 463 [2018-11-18 23:30:15,160 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2018-11-18 23:30:15,161 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 463 states. [2018-11-18 23:30:16,225 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 463 to 450. [2018-11-18 23:30:16,226 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:30:16,226 INFO L82 GeneralOperation]: Start isEquivalent. First operand 463 states. Second operand 450 states. [2018-11-18 23:30:16,226 INFO L74 IsIncluded]: Start isIncluded. First operand 463 states. Second operand 450 states. [2018-11-18 23:30:16,226 INFO L87 Difference]: Start difference. First operand 463 states. Second operand 450 states. [2018-11-18 23:30:16,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:16,257 INFO L93 Difference]: Finished difference Result 463 states and 620 transitions. [2018-11-18 23:30:16,257 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 620 transitions. [2018-11-18 23:30:16,259 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:16,259 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:16,259 INFO L74 IsIncluded]: Start isIncluded. First operand 450 states. Second operand 463 states. [2018-11-18 23:30:16,259 INFO L87 Difference]: Start difference. First operand 450 states. Second operand 463 states. [2018-11-18 23:30:16,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:16,290 INFO L93 Difference]: Finished difference Result 463 states and 620 transitions. [2018-11-18 23:30:16,290 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 620 transitions. [2018-11-18 23:30:16,292 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:16,292 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:16,292 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:30:16,292 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:30:16,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 450 states. [2018-11-18 23:30:16,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 450 states to 450 states and 590 transitions. [2018-11-18 23:30:16,324 INFO L78 Accepts]: Start accepts. Automaton has 450 states and 590 transitions. Word has length 47 [2018-11-18 23:30:16,324 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:30:16,325 INFO L480 AbstractCegarLoop]: Abstraction has 450 states and 590 transitions. [2018-11-18 23:30:16,325 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-18 23:30:16,325 INFO L276 IsEmpty]: Start isEmpty. Operand 450 states and 590 transitions. [2018-11-18 23:30:16,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-11-18 23:30:16,326 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:30:16,326 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:30:16,326 INFO L423 AbstractCegarLoop]: === Iteration 16 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:30:16,326 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:30:16,326 INFO L82 PathProgramCache]: Analyzing trace with hash -601026861, now seen corresponding path program 1 times [2018-11-18 23:30:16,327 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:30:16,327 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:30:16,328 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:16,328 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:30:16,328 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:16,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:30:16,659 INFO L256 TraceCheckUtils]: 0: Hoare triple {48298#true} call ULTIMATE.init(); {48298#true} is VALID [2018-11-18 23:30:16,659 INFO L273 TraceCheckUtils]: 1: Hoare triple {48298#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {48298#true} is VALID [2018-11-18 23:30:16,659 INFO L273 TraceCheckUtils]: 2: Hoare triple {48298#true} assume true; {48298#true} is VALID [2018-11-18 23:30:16,660 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {48298#true} {48298#true} #813#return; {48298#true} is VALID [2018-11-18 23:30:16,660 INFO L256 TraceCheckUtils]: 4: Hoare triple {48298#true} call #t~ret127 := main(); {48298#true} is VALID [2018-11-18 23:30:16,660 INFO L273 TraceCheckUtils]: 5: Hoare triple {48298#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {48298#true} is VALID [2018-11-18 23:30:16,660 INFO L256 TraceCheckUtils]: 6: Hoare triple {48298#true} call _BLAST_init(); {48298#true} is VALID [2018-11-18 23:30:16,661 INFO L273 TraceCheckUtils]: 7: Hoare triple {48298#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {48300#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:30:16,661 INFO L273 TraceCheckUtils]: 8: Hoare triple {48300#(<= (+ ~DC~0 5) ~IPC~0)} assume true; {48300#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:30:16,662 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {48300#(<= (+ ~DC~0 5) ~IPC~0)} {48298#true} #697#return; {48300#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:30:16,662 INFO L273 TraceCheckUtils]: 10: Hoare triple {48300#(<= (+ ~DC~0 5) ~IPC~0)} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {48300#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:30:16,662 INFO L273 TraceCheckUtils]: 11: Hoare triple {48300#(<= (+ ~DC~0 5) ~IPC~0)} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {48300#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:30:16,663 INFO L256 TraceCheckUtils]: 12: Hoare triple {48300#(<= (+ ~DC~0 5) ~IPC~0)} call stub_driver_init(); {48298#true} is VALID [2018-11-18 23:30:16,663 INFO L273 TraceCheckUtils]: 13: Hoare triple {48298#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {48298#true} is VALID [2018-11-18 23:30:16,663 INFO L273 TraceCheckUtils]: 14: Hoare triple {48298#true} assume true; {48298#true} is VALID [2018-11-18 23:30:16,663 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {48298#true} {48300#(<= (+ ~DC~0 5) ~IPC~0)} #699#return; {48300#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:30:16,664 INFO L273 TraceCheckUtils]: 16: Hoare triple {48300#(<= (+ ~DC~0 5) ~IPC~0)} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {48300#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:30:16,664 INFO L273 TraceCheckUtils]: 17: Hoare triple {48300#(<= (+ ~DC~0 5) ~IPC~0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {48300#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:30:16,665 INFO L273 TraceCheckUtils]: 18: Hoare triple {48300#(<= (+ ~DC~0 5) ~IPC~0)} assume 2 == ~tmp_ndt_2~0; {48300#(<= (+ ~DC~0 5) ~IPC~0)} is VALID [2018-11-18 23:30:16,665 INFO L256 TraceCheckUtils]: 19: Hoare triple {48300#(<= (+ ~DC~0 5) ~IPC~0)} call #t~ret109 := DiskPerfDeviceControl(~devobj~0, ~pirp~0); {48298#true} is VALID [2018-11-18 23:30:16,665 INFO L273 TraceCheckUtils]: 20: Hoare triple {48298#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet50;havoc #t~nondet50;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~4 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~DeviceObject__DeviceExtension~5 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~deviceExtension__TargetDeviceObject~4 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__OutputBufferLength~0 := #t~nondet55;havoc #t~nondet55;assume -2147483648 <= #t~nondet56 && #t~nondet56 <= 2147483647;~sizeof__DISK_PERFORMANCE~0 := #t~nondet56;havoc #t~nondet56;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~deviceExtension__DiskCounters~0 := #t~nondet57;havoc #t~nondet57;assume -2147483648 <= #t~nondet58 && #t~nondet58 <= 2147483647;~Irp__AssociatedIrp__SystemBuffer~0 := #t~nondet58;havoc #t~nondet58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~deviceExtension__Processors~0 := #t~nondet59;havoc #t~nondet59;havoc ~totalCounters__QueueDepth~0;assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~deviceExtension__QueueDepth~0 := #t~nondet60;havoc #t~nondet60;havoc ~Irp__IoStatus__Status~2;havoc ~deviceExtension~5;havoc ~currentIrpStack~0;havoc ~status~4;havoc ~i~0;havoc ~totalCounters~0;havoc ~diskCounters~0;havoc ~tmp~3;havoc ~__cil_tmp24~0;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;~deviceExtension~5 := ~DeviceObject__DeviceExtension~5;~currentIrpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~4;~__cil_tmp24~0 := 32;~__cil_tmp25~0 := 458752;~__cil_tmp26~0 := 458784; {48298#true} is VALID [2018-11-18 23:30:16,666 INFO L273 TraceCheckUtils]: 21: Hoare triple {48298#true} assume !(~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp26~0);#t~post62 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post62;havoc #t~post62;#t~post63 := ~Irp__Tail__Overlay__CurrentStackLocation~4;~Irp__Tail__Overlay__CurrentStackLocation~4 := 1 + #t~post63;havoc #t~post63; {48298#true} is VALID [2018-11-18 23:30:16,666 INFO L256 TraceCheckUtils]: 22: Hoare triple {48298#true} call #t~ret64 := IofCallDriver(~deviceExtension__TargetDeviceObject~4, ~Irp); {48298#true} is VALID [2018-11-18 23:30:16,666 INFO L273 TraceCheckUtils]: 23: Hoare triple {48298#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~lcontext~0 := #t~nondet115;havoc #t~nondet115;havoc ~__cil_tmp7~0; {48298#true} is VALID [2018-11-18 23:30:16,666 INFO L273 TraceCheckUtils]: 24: Hoare triple {48298#true} assume !(0 != ~compRegistered~0); {48298#true} is VALID [2018-11-18 23:30:16,667 INFO L273 TraceCheckUtils]: 25: Hoare triple {48298#true} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet118 && #t~nondet118 <= 2147483647;~tmp_ndt_8~0 := #t~nondet118;havoc #t~nondet118; {48298#true} is VALID [2018-11-18 23:30:16,667 INFO L273 TraceCheckUtils]: 26: Hoare triple {48298#true} assume !(0 == ~tmp_ndt_8~0);havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647;~tmp_ndt_9~0 := #t~nondet119;havoc #t~nondet119; {48298#true} is VALID [2018-11-18 23:30:16,667 INFO L273 TraceCheckUtils]: 27: Hoare triple {48298#true} assume 1 == ~tmp_ndt_9~0; {48298#true} is VALID [2018-11-18 23:30:16,667 INFO L273 TraceCheckUtils]: 28: Hoare triple {48298#true} ~returnVal2~0 := -1073741823; {48298#true} is VALID [2018-11-18 23:30:16,668 INFO L273 TraceCheckUtils]: 29: Hoare triple {48298#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {48301#(<= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:30:16,668 INFO L273 TraceCheckUtils]: 30: Hoare triple {48301#(<= ~IPC~0 ~s~0)} #res := ~returnVal2~0; {48301#(<= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:30:16,669 INFO L273 TraceCheckUtils]: 31: Hoare triple {48301#(<= ~IPC~0 ~s~0)} assume true; {48301#(<= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:30:16,670 INFO L268 TraceCheckUtils]: 32: Hoare quadruple {48301#(<= ~IPC~0 ~s~0)} {48298#true} #787#return; {48301#(<= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:30:16,670 INFO L273 TraceCheckUtils]: 33: Hoare triple {48301#(<= ~IPC~0 ~s~0)} assume -2147483648 <= #t~ret64 && #t~ret64 <= 2147483647;~tmp~3 := #t~ret64;havoc #t~ret64;#res := ~tmp~3; {48301#(<= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:30:16,670 INFO L273 TraceCheckUtils]: 34: Hoare triple {48301#(<= ~IPC~0 ~s~0)} assume true; {48301#(<= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:30:16,671 INFO L268 TraceCheckUtils]: 35: Hoare quadruple {48301#(<= ~IPC~0 ~s~0)} {48300#(<= (+ ~DC~0 5) ~IPC~0)} #703#return; {48302#(<= (+ ~DC~0 5) ~s~0)} is VALID [2018-11-18 23:30:16,672 INFO L273 TraceCheckUtils]: 36: Hoare triple {48302#(<= (+ ~DC~0 5) ~s~0)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~6 := #t~ret109;havoc #t~ret109; {48302#(<= (+ ~DC~0 5) ~s~0)} is VALID [2018-11-18 23:30:16,672 INFO L273 TraceCheckUtils]: 37: Hoare triple {48302#(<= (+ ~DC~0 5) ~s~0)} assume !(0 != ~we_should_unload~0); {48302#(<= (+ ~DC~0 5) ~s~0)} is VALID [2018-11-18 23:30:16,673 INFO L273 TraceCheckUtils]: 38: Hoare triple {48302#(<= (+ ~DC~0 5) ~s~0)} assume !(1 == ~pended~0); {48302#(<= (+ ~DC~0 5) ~s~0)} is VALID [2018-11-18 23:30:16,673 INFO L273 TraceCheckUtils]: 39: Hoare triple {48302#(<= (+ ~DC~0 5) ~s~0)} assume !(1 == ~pended~0); {48302#(<= (+ ~DC~0 5) ~s~0)} is VALID [2018-11-18 23:30:16,673 INFO L273 TraceCheckUtils]: 40: Hoare triple {48302#(<= (+ ~DC~0 5) ~s~0)} assume ~s~0 != ~UNLOADED~0; {48302#(<= (+ ~DC~0 5) ~s~0)} is VALID [2018-11-18 23:30:16,674 INFO L273 TraceCheckUtils]: 41: Hoare triple {48302#(<= (+ ~DC~0 5) ~s~0)} assume -1 != ~status~6; {48302#(<= (+ ~DC~0 5) ~s~0)} is VALID [2018-11-18 23:30:16,674 INFO L273 TraceCheckUtils]: 42: Hoare triple {48302#(<= (+ ~DC~0 5) ~s~0)} assume !(~s~0 != ~SKIP2~0); {48302#(<= (+ ~DC~0 5) ~s~0)} is VALID [2018-11-18 23:30:16,674 INFO L273 TraceCheckUtils]: 43: Hoare triple {48302#(<= (+ ~DC~0 5) ~s~0)} assume !(1 == ~pended~0); {48302#(<= (+ ~DC~0 5) ~s~0)} is VALID [2018-11-18 23:30:16,675 INFO L273 TraceCheckUtils]: 44: Hoare triple {48302#(<= (+ ~DC~0 5) ~s~0)} assume ~s~0 == ~DC~0; {48299#false} is VALID [2018-11-18 23:30:16,675 INFO L273 TraceCheckUtils]: 45: Hoare triple {48299#false} assume 259 == ~status~6; {48299#false} is VALID [2018-11-18 23:30:16,675 INFO L256 TraceCheckUtils]: 46: Hoare triple {48299#false} call errorFn(); {48299#false} is VALID [2018-11-18 23:30:16,675 INFO L273 TraceCheckUtils]: 47: Hoare triple {48299#false} assume !false; {48299#false} is VALID [2018-11-18 23:30:16,678 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:30:16,678 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:30:16,678 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 23:30:16,679 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 48 [2018-11-18 23:30:16,679 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:30:16,679 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2018-11-18 23:30:16,736 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 48 edges. 48 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:16,737 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-18 23:30:16,737 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 23:30:16,737 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:30:16,737 INFO L87 Difference]: Start difference. First operand 450 states and 590 transitions. Second operand 5 states. [2018-11-18 23:30:21,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:21,730 INFO L93 Difference]: Finished difference Result 581 states and 795 transitions. [2018-11-18 23:30:21,730 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 23:30:21,730 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 48 [2018-11-18 23:30:21,731 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:30:21,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 23:30:21,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 534 transitions. [2018-11-18 23:30:21,735 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 23:30:21,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 534 transitions. [2018-11-18 23:30:21,739 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 534 transitions. [2018-11-18 23:30:22,404 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 534 edges. 534 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:22,423 INFO L225 Difference]: With dead ends: 581 [2018-11-18 23:30:22,423 INFO L226 Difference]: Without dead ends: 562 [2018-11-18 23:30:22,424 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-11-18 23:30:22,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 562 states. [2018-11-18 23:30:23,307 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 562 to 435. [2018-11-18 23:30:23,308 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:30:23,308 INFO L82 GeneralOperation]: Start isEquivalent. First operand 562 states. Second operand 435 states. [2018-11-18 23:30:23,308 INFO L74 IsIncluded]: Start isIncluded. First operand 562 states. Second operand 435 states. [2018-11-18 23:30:23,308 INFO L87 Difference]: Start difference. First operand 562 states. Second operand 435 states. [2018-11-18 23:30:23,331 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:23,332 INFO L93 Difference]: Finished difference Result 562 states and 771 transitions. [2018-11-18 23:30:23,332 INFO L276 IsEmpty]: Start isEmpty. Operand 562 states and 771 transitions. [2018-11-18 23:30:23,334 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:23,334 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:23,334 INFO L74 IsIncluded]: Start isIncluded. First operand 435 states. Second operand 562 states. [2018-11-18 23:30:23,334 INFO L87 Difference]: Start difference. First operand 435 states. Second operand 562 states. [2018-11-18 23:30:23,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:23,358 INFO L93 Difference]: Finished difference Result 562 states and 771 transitions. [2018-11-18 23:30:23,358 INFO L276 IsEmpty]: Start isEmpty. Operand 562 states and 771 transitions. [2018-11-18 23:30:23,360 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:23,360 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:23,360 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:30:23,360 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:30:23,360 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 435 states. [2018-11-18 23:30:23,376 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 435 states to 435 states and 569 transitions. [2018-11-18 23:30:23,376 INFO L78 Accepts]: Start accepts. Automaton has 435 states and 569 transitions. Word has length 48 [2018-11-18 23:30:23,376 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:30:23,376 INFO L480 AbstractCegarLoop]: Abstraction has 435 states and 569 transitions. [2018-11-18 23:30:23,377 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-18 23:30:23,377 INFO L276 IsEmpty]: Start isEmpty. Operand 435 states and 569 transitions. [2018-11-18 23:30:23,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-11-18 23:30:23,377 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:30:23,377 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:30:23,378 INFO L423 AbstractCegarLoop]: === Iteration 17 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:30:23,378 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:30:23,378 INFO L82 PathProgramCache]: Analyzing trace with hash 1969665160, now seen corresponding path program 1 times [2018-11-18 23:30:23,378 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:30:23,378 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:30:23,379 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:23,379 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:30:23,379 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:23,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:30:23,552 INFO L256 TraceCheckUtils]: 0: Hoare triple {50813#true} call ULTIMATE.init(); {50813#true} is VALID [2018-11-18 23:30:23,553 INFO L273 TraceCheckUtils]: 1: Hoare triple {50813#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {50813#true} is VALID [2018-11-18 23:30:23,553 INFO L273 TraceCheckUtils]: 2: Hoare triple {50813#true} assume true; {50813#true} is VALID [2018-11-18 23:30:23,553 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {50813#true} {50813#true} #813#return; {50813#true} is VALID [2018-11-18 23:30:23,553 INFO L256 TraceCheckUtils]: 4: Hoare triple {50813#true} call #t~ret127 := main(); {50813#true} is VALID [2018-11-18 23:30:23,554 INFO L273 TraceCheckUtils]: 5: Hoare triple {50813#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {50813#true} is VALID [2018-11-18 23:30:23,554 INFO L256 TraceCheckUtils]: 6: Hoare triple {50813#true} call _BLAST_init(); {50813#true} is VALID [2018-11-18 23:30:23,554 INFO L273 TraceCheckUtils]: 7: Hoare triple {50813#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {50813#true} is VALID [2018-11-18 23:30:23,555 INFO L273 TraceCheckUtils]: 8: Hoare triple {50813#true} assume true; {50813#true} is VALID [2018-11-18 23:30:23,555 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {50813#true} {50813#true} #697#return; {50813#true} is VALID [2018-11-18 23:30:23,555 INFO L273 TraceCheckUtils]: 10: Hoare triple {50813#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {50813#true} is VALID [2018-11-18 23:30:23,555 INFO L273 TraceCheckUtils]: 11: Hoare triple {50813#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {50813#true} is VALID [2018-11-18 23:30:23,556 INFO L256 TraceCheckUtils]: 12: Hoare triple {50813#true} call stub_driver_init(); {50813#true} is VALID [2018-11-18 23:30:23,556 INFO L273 TraceCheckUtils]: 13: Hoare triple {50813#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {50813#true} is VALID [2018-11-18 23:30:23,556 INFO L273 TraceCheckUtils]: 14: Hoare triple {50813#true} assume true; {50813#true} is VALID [2018-11-18 23:30:23,557 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {50813#true} {50813#true} #699#return; {50813#true} is VALID [2018-11-18 23:30:23,557 INFO L273 TraceCheckUtils]: 16: Hoare triple {50813#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {50813#true} is VALID [2018-11-18 23:30:23,557 INFO L273 TraceCheckUtils]: 17: Hoare triple {50813#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {50813#true} is VALID [2018-11-18 23:30:23,557 INFO L273 TraceCheckUtils]: 18: Hoare triple {50813#true} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {50813#true} is VALID [2018-11-18 23:30:23,557 INFO L273 TraceCheckUtils]: 19: Hoare triple {50813#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet106 && #t~nondet106 <= 2147483647;~tmp_ndt_4~0 := #t~nondet106;havoc #t~nondet106; {50813#true} is VALID [2018-11-18 23:30:23,558 INFO L273 TraceCheckUtils]: 20: Hoare triple {50813#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet107 && #t~nondet107 <= 2147483647;~tmp_ndt_5~0 := #t~nondet107;havoc #t~nondet107; {50813#true} is VALID [2018-11-18 23:30:23,558 INFO L273 TraceCheckUtils]: 21: Hoare triple {50813#true} assume 12 == ~tmp_ndt_5~0; {50813#true} is VALID [2018-11-18 23:30:23,558 INFO L256 TraceCheckUtils]: 22: Hoare triple {50813#true} call #t~ret112 := DiskPerfShutdownFlush(~devobj~0, ~pirp~0); {50813#true} is VALID [2018-11-18 23:30:23,558 INFO L273 TraceCheckUtils]: 23: Hoare triple {50813#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~DeviceObject__DeviceExtension~6 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~Irp__CurrentLocation~3 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~5 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~deviceExtension__TargetDeviceObject~5 := #t~nondet68;havoc #t~nondet68;havoc ~deviceExtension~6;havoc ~tmp~4;~deviceExtension~6 := ~DeviceObject__DeviceExtension~6;#t~post69 := ~Irp__CurrentLocation~3;~Irp__CurrentLocation~3 := 1 + #t~post69;havoc #t~post69;#t~post70 := ~Irp__Tail__Overlay__CurrentStackLocation~5;~Irp__Tail__Overlay__CurrentStackLocation~5 := 1 + #t~post70;havoc #t~post70; {50813#true} is VALID [2018-11-18 23:30:23,558 INFO L256 TraceCheckUtils]: 24: Hoare triple {50813#true} call #t~ret71 := IofCallDriver(~deviceExtension__TargetDeviceObject~5, ~Irp); {50813#true} is VALID [2018-11-18 23:30:23,559 INFO L273 TraceCheckUtils]: 25: Hoare triple {50813#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~lcontext~0 := #t~nondet115;havoc #t~nondet115;havoc ~__cil_tmp7~0; {50813#true} is VALID [2018-11-18 23:30:23,559 INFO L273 TraceCheckUtils]: 26: Hoare triple {50813#true} assume !(0 != ~compRegistered~0); {50813#true} is VALID [2018-11-18 23:30:23,559 INFO L273 TraceCheckUtils]: 27: Hoare triple {50813#true} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet118 && #t~nondet118 <= 2147483647;~tmp_ndt_8~0 := #t~nondet118;havoc #t~nondet118; {50813#true} is VALID [2018-11-18 23:30:23,559 INFO L273 TraceCheckUtils]: 28: Hoare triple {50813#true} assume 0 == ~tmp_ndt_8~0; {50813#true} is VALID [2018-11-18 23:30:23,559 INFO L273 TraceCheckUtils]: 29: Hoare triple {50813#true} ~returnVal2~0 := 0; {50813#true} is VALID [2018-11-18 23:30:23,582 INFO L273 TraceCheckUtils]: 30: Hoare triple {50813#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {50815#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2018-11-18 23:30:23,585 INFO L273 TraceCheckUtils]: 31: Hoare triple {50815#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {50816#(= ~lowerDriverReturn~0 |IofCallDriver_#res|)} is VALID [2018-11-18 23:30:23,585 INFO L273 TraceCheckUtils]: 32: Hoare triple {50816#(= ~lowerDriverReturn~0 |IofCallDriver_#res|)} assume true; {50816#(= ~lowerDriverReturn~0 |IofCallDriver_#res|)} is VALID [2018-11-18 23:30:23,586 INFO L268 TraceCheckUtils]: 33: Hoare quadruple {50816#(= ~lowerDriverReturn~0 |IofCallDriver_#res|)} {50813#true} #817#return; {50817#(= ~lowerDriverReturn~0 |DiskPerfShutdownFlush_#t~ret71|)} is VALID [2018-11-18 23:30:23,587 INFO L273 TraceCheckUtils]: 34: Hoare triple {50817#(= ~lowerDriverReturn~0 |DiskPerfShutdownFlush_#t~ret71|)} assume -2147483648 <= #t~ret71 && #t~ret71 <= 2147483647;~tmp~4 := #t~ret71;havoc #t~ret71;#res := ~tmp~4; {50818#(= ~lowerDriverReturn~0 |DiskPerfShutdownFlush_#res|)} is VALID [2018-11-18 23:30:23,587 INFO L273 TraceCheckUtils]: 35: Hoare triple {50818#(= ~lowerDriverReturn~0 |DiskPerfShutdownFlush_#res|)} assume true; {50818#(= ~lowerDriverReturn~0 |DiskPerfShutdownFlush_#res|)} is VALID [2018-11-18 23:30:23,588 INFO L268 TraceCheckUtils]: 36: Hoare quadruple {50818#(= ~lowerDriverReturn~0 |DiskPerfShutdownFlush_#res|)} {50813#true} #709#return; {50819#(= ~lowerDriverReturn~0 |main_#t~ret112|)} is VALID [2018-11-18 23:30:23,588 INFO L273 TraceCheckUtils]: 37: Hoare triple {50819#(= ~lowerDriverReturn~0 |main_#t~ret112|)} assume -2147483648 <= #t~ret112 && #t~ret112 <= 2147483647;~status~6 := #t~ret112;havoc #t~ret112; {50820#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:23,588 INFO L273 TraceCheckUtils]: 38: Hoare triple {50820#(= main_~status~6 ~lowerDriverReturn~0)} assume !(0 != ~we_should_unload~0); {50820#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:23,589 INFO L273 TraceCheckUtils]: 39: Hoare triple {50820#(= main_~status~6 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {50820#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:23,589 INFO L273 TraceCheckUtils]: 40: Hoare triple {50820#(= main_~status~6 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {50820#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:23,590 INFO L273 TraceCheckUtils]: 41: Hoare triple {50820#(= main_~status~6 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {50820#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:23,590 INFO L273 TraceCheckUtils]: 42: Hoare triple {50820#(= main_~status~6 ~lowerDriverReturn~0)} assume -1 != ~status~6; {50820#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:23,591 INFO L273 TraceCheckUtils]: 43: Hoare triple {50820#(= main_~status~6 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {50820#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:23,591 INFO L273 TraceCheckUtils]: 44: Hoare triple {50820#(= main_~status~6 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {50820#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:23,592 INFO L273 TraceCheckUtils]: 45: Hoare triple {50820#(= main_~status~6 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {50820#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:23,592 INFO L273 TraceCheckUtils]: 46: Hoare triple {50820#(= main_~status~6 ~lowerDriverReturn~0)} assume ~status~6 != ~lowerDriverReturn~0; {50814#false} is VALID [2018-11-18 23:30:23,592 INFO L256 TraceCheckUtils]: 47: Hoare triple {50814#false} call errorFn(); {50814#false} is VALID [2018-11-18 23:30:23,593 INFO L273 TraceCheckUtils]: 48: Hoare triple {50814#false} assume !false; {50814#false} is VALID [2018-11-18 23:30:23,594 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:30:23,595 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:30:23,595 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-18 23:30:23,595 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 49 [2018-11-18 23:30:23,595 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:30:23,595 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2018-11-18 23:30:23,645 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:23,645 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-18 23:30:23,646 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 23:30:23,646 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-18 23:30:23,646 INFO L87 Difference]: Start difference. First operand 435 states and 569 transitions. Second operand 8 states. [2018-11-18 23:30:27,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:27,019 INFO L93 Difference]: Finished difference Result 449 states and 585 transitions. [2018-11-18 23:30:27,019 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-18 23:30:27,019 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 49 [2018-11-18 23:30:27,019 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:30:27,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-18 23:30:27,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 327 transitions. [2018-11-18 23:30:27,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-18 23:30:27,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 327 transitions. [2018-11-18 23:30:27,024 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 327 transitions. [2018-11-18 23:30:27,354 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 327 edges. 327 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:27,366 INFO L225 Difference]: With dead ends: 449 [2018-11-18 23:30:27,366 INFO L226 Difference]: Without dead ends: 418 [2018-11-18 23:30:27,367 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2018-11-18 23:30:27,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 418 states. [2018-11-18 23:30:28,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 418 to 418. [2018-11-18 23:30:28,876 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:30:28,877 INFO L82 GeneralOperation]: Start isEquivalent. First operand 418 states. Second operand 418 states. [2018-11-18 23:30:28,877 INFO L74 IsIncluded]: Start isIncluded. First operand 418 states. Second operand 418 states. [2018-11-18 23:30:28,877 INFO L87 Difference]: Start difference. First operand 418 states. Second operand 418 states. [2018-11-18 23:30:28,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:28,888 INFO L93 Difference]: Finished difference Result 418 states and 548 transitions. [2018-11-18 23:30:28,889 INFO L276 IsEmpty]: Start isEmpty. Operand 418 states and 548 transitions. [2018-11-18 23:30:28,889 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:28,889 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:28,889 INFO L74 IsIncluded]: Start isIncluded. First operand 418 states. Second operand 418 states. [2018-11-18 23:30:28,889 INFO L87 Difference]: Start difference. First operand 418 states. Second operand 418 states. [2018-11-18 23:30:28,900 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:28,900 INFO L93 Difference]: Finished difference Result 418 states and 548 transitions. [2018-11-18 23:30:28,900 INFO L276 IsEmpty]: Start isEmpty. Operand 418 states and 548 transitions. [2018-11-18 23:30:28,901 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:28,901 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:28,901 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:30:28,901 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:30:28,901 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 418 states. [2018-11-18 23:30:28,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 418 states to 418 states and 548 transitions. [2018-11-18 23:30:28,912 INFO L78 Accepts]: Start accepts. Automaton has 418 states and 548 transitions. Word has length 49 [2018-11-18 23:30:28,913 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:30:28,913 INFO L480 AbstractCegarLoop]: Abstraction has 418 states and 548 transitions. [2018-11-18 23:30:28,913 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-18 23:30:28,913 INFO L276 IsEmpty]: Start isEmpty. Operand 418 states and 548 transitions. [2018-11-18 23:30:28,913 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-18 23:30:28,913 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:30:28,913 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:30:28,913 INFO L423 AbstractCegarLoop]: === Iteration 18 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:30:28,914 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:30:28,914 INFO L82 PathProgramCache]: Analyzing trace with hash -1552038808, now seen corresponding path program 1 times [2018-11-18 23:30:28,914 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:30:28,914 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:30:28,914 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:28,915 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:30:28,915 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:28,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:30:29,132 INFO L256 TraceCheckUtils]: 0: Hoare triple {52837#true} call ULTIMATE.init(); {52837#true} is VALID [2018-11-18 23:30:29,132 INFO L273 TraceCheckUtils]: 1: Hoare triple {52837#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {52837#true} is VALID [2018-11-18 23:30:29,133 INFO L273 TraceCheckUtils]: 2: Hoare triple {52837#true} assume true; {52837#true} is VALID [2018-11-18 23:30:29,133 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {52837#true} {52837#true} #813#return; {52837#true} is VALID [2018-11-18 23:30:29,133 INFO L256 TraceCheckUtils]: 4: Hoare triple {52837#true} call #t~ret127 := main(); {52837#true} is VALID [2018-11-18 23:30:29,133 INFO L273 TraceCheckUtils]: 5: Hoare triple {52837#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {52837#true} is VALID [2018-11-18 23:30:29,134 INFO L256 TraceCheckUtils]: 6: Hoare triple {52837#true} call _BLAST_init(); {52837#true} is VALID [2018-11-18 23:30:29,134 INFO L273 TraceCheckUtils]: 7: Hoare triple {52837#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {52837#true} is VALID [2018-11-18 23:30:29,134 INFO L273 TraceCheckUtils]: 8: Hoare triple {52837#true} assume true; {52837#true} is VALID [2018-11-18 23:30:29,134 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {52837#true} {52837#true} #697#return; {52837#true} is VALID [2018-11-18 23:30:29,134 INFO L273 TraceCheckUtils]: 10: Hoare triple {52837#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {52837#true} is VALID [2018-11-18 23:30:29,135 INFO L273 TraceCheckUtils]: 11: Hoare triple {52837#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {52837#true} is VALID [2018-11-18 23:30:29,135 INFO L256 TraceCheckUtils]: 12: Hoare triple {52837#true} call stub_driver_init(); {52837#true} is VALID [2018-11-18 23:30:29,135 INFO L273 TraceCheckUtils]: 13: Hoare triple {52837#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {52837#true} is VALID [2018-11-18 23:30:29,135 INFO L273 TraceCheckUtils]: 14: Hoare triple {52837#true} assume true; {52837#true} is VALID [2018-11-18 23:30:29,135 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {52837#true} {52837#true} #699#return; {52837#true} is VALID [2018-11-18 23:30:29,135 INFO L273 TraceCheckUtils]: 16: Hoare triple {52837#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {52837#true} is VALID [2018-11-18 23:30:29,135 INFO L273 TraceCheckUtils]: 17: Hoare triple {52837#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {52837#true} is VALID [2018-11-18 23:30:29,135 INFO L273 TraceCheckUtils]: 18: Hoare triple {52837#true} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {52837#true} is VALID [2018-11-18 23:30:29,136 INFO L273 TraceCheckUtils]: 19: Hoare triple {52837#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet106 && #t~nondet106 <= 2147483647;~tmp_ndt_4~0 := #t~nondet106;havoc #t~nondet106; {52837#true} is VALID [2018-11-18 23:30:29,136 INFO L273 TraceCheckUtils]: 20: Hoare triple {52837#true} assume 4 == ~tmp_ndt_4~0; {52837#true} is VALID [2018-11-18 23:30:29,136 INFO L256 TraceCheckUtils]: 21: Hoare triple {52837#true} call #t~ret111 := DiskPerfDispatchPower(~devobj~0, ~pirp~0); {52837#true} is VALID [2018-11-18 23:30:29,136 INFO L273 TraceCheckUtils]: 22: Hoare triple {52837#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet21;havoc #t~nondet21;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~DeviceObject__DeviceExtension~3 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~deviceExtension__TargetDeviceObject~2 := #t~nondet23;havoc #t~nondet23;havoc ~deviceExtension~3;havoc ~tmp~2; {52837#true} is VALID [2018-11-18 23:30:29,136 INFO L273 TraceCheckUtils]: 23: Hoare triple {52837#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {52837#true} is VALID [2018-11-18 23:30:29,136 INFO L273 TraceCheckUtils]: 24: Hoare triple {52837#true} #t~post24 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post24;havoc #t~post24;#t~post25 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post25;havoc #t~post25;~deviceExtension~3 := ~DeviceObject__DeviceExtension~3; {52837#true} is VALID [2018-11-18 23:30:29,136 INFO L256 TraceCheckUtils]: 25: Hoare triple {52837#true} call #t~ret26 := PoCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); {52837#true} is VALID [2018-11-18 23:30:29,136 INFO L273 TraceCheckUtils]: 26: Hoare triple {52837#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~lcontext~1 := #t~nondet122;havoc #t~nondet122;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~0; {52837#true} is VALID [2018-11-18 23:30:29,137 INFO L273 TraceCheckUtils]: 27: Hoare triple {52837#true} assume !(0 != ~compRegistered~0); {52837#true} is VALID [2018-11-18 23:30:29,137 INFO L273 TraceCheckUtils]: 28: Hoare triple {52837#true} havoc ~tmp_ndt_11~0;assume -2147483648 <= #t~nondet125 && #t~nondet125 <= 2147483647;~tmp_ndt_11~0 := #t~nondet125;havoc #t~nondet125; {52837#true} is VALID [2018-11-18 23:30:29,137 INFO L273 TraceCheckUtils]: 29: Hoare triple {52837#true} assume 0 == ~tmp_ndt_11~0; {52837#true} is VALID [2018-11-18 23:30:29,137 INFO L273 TraceCheckUtils]: 30: Hoare triple {52837#true} ~returnVal~0 := 0; {52837#true} is VALID [2018-11-18 23:30:29,137 INFO L273 TraceCheckUtils]: 31: Hoare triple {52837#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {52839#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2018-11-18 23:30:29,138 INFO L273 TraceCheckUtils]: 32: Hoare triple {52839#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {52840#(= ~lowerDriverReturn~0 |PoCallDriver_#res|)} is VALID [2018-11-18 23:30:29,138 INFO L273 TraceCheckUtils]: 33: Hoare triple {52840#(= ~lowerDriverReturn~0 |PoCallDriver_#res|)} assume true; {52840#(= ~lowerDriverReturn~0 |PoCallDriver_#res|)} is VALID [2018-11-18 23:30:29,139 INFO L268 TraceCheckUtils]: 34: Hoare quadruple {52840#(= ~lowerDriverReturn~0 |PoCallDriver_#res|)} {52837#true} #733#return; {52841#(= ~lowerDriverReturn~0 |DiskPerfDispatchPower_#t~ret26|)} is VALID [2018-11-18 23:30:29,139 INFO L273 TraceCheckUtils]: 35: Hoare triple {52841#(= ~lowerDriverReturn~0 |DiskPerfDispatchPower_#t~ret26|)} assume -2147483648 <= #t~ret26 && #t~ret26 <= 2147483647;~tmp~2 := #t~ret26;havoc #t~ret26;#res := ~tmp~2; {52842#(= ~lowerDriverReturn~0 |DiskPerfDispatchPower_#res|)} is VALID [2018-11-18 23:30:29,140 INFO L273 TraceCheckUtils]: 36: Hoare triple {52842#(= ~lowerDriverReturn~0 |DiskPerfDispatchPower_#res|)} assume true; {52842#(= ~lowerDriverReturn~0 |DiskPerfDispatchPower_#res|)} is VALID [2018-11-18 23:30:29,141 INFO L268 TraceCheckUtils]: 37: Hoare quadruple {52842#(= ~lowerDriverReturn~0 |DiskPerfDispatchPower_#res|)} {52837#true} #707#return; {52843#(= ~lowerDriverReturn~0 |main_#t~ret111|)} is VALID [2018-11-18 23:30:29,141 INFO L273 TraceCheckUtils]: 38: Hoare triple {52843#(= ~lowerDriverReturn~0 |main_#t~ret111|)} assume -2147483648 <= #t~ret111 && #t~ret111 <= 2147483647;~status~6 := #t~ret111;havoc #t~ret111; {52844#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:29,142 INFO L273 TraceCheckUtils]: 39: Hoare triple {52844#(= main_~status~6 ~lowerDriverReturn~0)} assume !(0 != ~we_should_unload~0); {52844#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:29,142 INFO L273 TraceCheckUtils]: 40: Hoare triple {52844#(= main_~status~6 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {52844#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:29,143 INFO L273 TraceCheckUtils]: 41: Hoare triple {52844#(= main_~status~6 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {52844#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:29,143 INFO L273 TraceCheckUtils]: 42: Hoare triple {52844#(= main_~status~6 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {52844#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:29,146 INFO L273 TraceCheckUtils]: 43: Hoare triple {52844#(= main_~status~6 ~lowerDriverReturn~0)} assume -1 != ~status~6; {52844#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:29,147 INFO L273 TraceCheckUtils]: 44: Hoare triple {52844#(= main_~status~6 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {52844#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:29,147 INFO L273 TraceCheckUtils]: 45: Hoare triple {52844#(= main_~status~6 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {52844#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:29,147 INFO L273 TraceCheckUtils]: 46: Hoare triple {52844#(= main_~status~6 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {52844#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:30:29,148 INFO L273 TraceCheckUtils]: 47: Hoare triple {52844#(= main_~status~6 ~lowerDriverReturn~0)} assume ~status~6 != ~lowerDriverReturn~0; {52838#false} is VALID [2018-11-18 23:30:29,149 INFO L256 TraceCheckUtils]: 48: Hoare triple {52838#false} call errorFn(); {52838#false} is VALID [2018-11-18 23:30:29,149 INFO L273 TraceCheckUtils]: 49: Hoare triple {52838#false} assume !false; {52838#false} is VALID [2018-11-18 23:30:29,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:30:29,150 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:30:29,150 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-18 23:30:29,151 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 50 [2018-11-18 23:30:29,151 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:30:29,151 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2018-11-18 23:30:29,206 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:29,206 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-18 23:30:29,207 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 23:30:29,207 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-18 23:30:29,207 INFO L87 Difference]: Start difference. First operand 418 states and 548 transitions. Second operand 8 states. [2018-11-18 23:30:32,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:32,181 INFO L93 Difference]: Finished difference Result 448 states and 586 transitions. [2018-11-18 23:30:32,182 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-18 23:30:32,182 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 50 [2018-11-18 23:30:32,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:30:32,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-18 23:30:32,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 324 transitions. [2018-11-18 23:30:32,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-18 23:30:32,186 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 324 transitions. [2018-11-18 23:30:32,186 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 324 transitions. [2018-11-18 23:30:32,490 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 324 edges. 324 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:32,504 INFO L225 Difference]: With dead ends: 448 [2018-11-18 23:30:32,504 INFO L226 Difference]: Without dead ends: 427 [2018-11-18 23:30:32,504 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2018-11-18 23:30:32,505 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 427 states. [2018-11-18 23:30:33,516 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 427 to 419. [2018-11-18 23:30:33,517 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:30:33,517 INFO L82 GeneralOperation]: Start isEquivalent. First operand 427 states. Second operand 419 states. [2018-11-18 23:30:33,517 INFO L74 IsIncluded]: Start isIncluded. First operand 427 states. Second operand 419 states. [2018-11-18 23:30:33,517 INFO L87 Difference]: Start difference. First operand 427 states. Second operand 419 states. [2018-11-18 23:30:33,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:33,530 INFO L93 Difference]: Finished difference Result 427 states and 560 transitions. [2018-11-18 23:30:33,530 INFO L276 IsEmpty]: Start isEmpty. Operand 427 states and 560 transitions. [2018-11-18 23:30:33,531 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:33,531 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:33,531 INFO L74 IsIncluded]: Start isIncluded. First operand 419 states. Second operand 427 states. [2018-11-18 23:30:33,531 INFO L87 Difference]: Start difference. First operand 419 states. Second operand 427 states. [2018-11-18 23:30:33,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:33,542 INFO L93 Difference]: Finished difference Result 427 states and 560 transitions. [2018-11-18 23:30:33,542 INFO L276 IsEmpty]: Start isEmpty. Operand 427 states and 560 transitions. [2018-11-18 23:30:33,542 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:33,542 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:33,542 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:30:33,542 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:30:33,543 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 419 states. [2018-11-18 23:30:33,552 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 419 states to 419 states and 551 transitions. [2018-11-18 23:30:33,552 INFO L78 Accepts]: Start accepts. Automaton has 419 states and 551 transitions. Word has length 50 [2018-11-18 23:30:33,552 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:30:33,553 INFO L480 AbstractCegarLoop]: Abstraction has 419 states and 551 transitions. [2018-11-18 23:30:33,553 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-18 23:30:33,553 INFO L276 IsEmpty]: Start isEmpty. Operand 419 states and 551 transitions. [2018-11-18 23:30:33,553 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-18 23:30:33,553 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:30:33,553 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:30:33,554 INFO L423 AbstractCegarLoop]: === Iteration 19 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:30:33,554 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:30:33,554 INFO L82 PathProgramCache]: Analyzing trace with hash -1495835486, now seen corresponding path program 1 times [2018-11-18 23:30:33,554 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:30:33,554 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:30:33,556 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:33,556 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:30:33,556 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:33,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:30:34,056 INFO L256 TraceCheckUtils]: 0: Hoare triple {54883#true} call ULTIMATE.init(); {54883#true} is VALID [2018-11-18 23:30:34,056 INFO L273 TraceCheckUtils]: 1: Hoare triple {54883#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {54883#true} is VALID [2018-11-18 23:30:34,057 INFO L273 TraceCheckUtils]: 2: Hoare triple {54883#true} assume true; {54883#true} is VALID [2018-11-18 23:30:34,057 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {54883#true} {54883#true} #813#return; {54883#true} is VALID [2018-11-18 23:30:34,057 INFO L256 TraceCheckUtils]: 4: Hoare triple {54883#true} call #t~ret127 := main(); {54883#true} is VALID [2018-11-18 23:30:34,057 INFO L273 TraceCheckUtils]: 5: Hoare triple {54883#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {54883#true} is VALID [2018-11-18 23:30:34,058 INFO L256 TraceCheckUtils]: 6: Hoare triple {54883#true} call _BLAST_init(); {54883#true} is VALID [2018-11-18 23:30:34,058 INFO L273 TraceCheckUtils]: 7: Hoare triple {54883#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {54883#true} is VALID [2018-11-18 23:30:34,058 INFO L273 TraceCheckUtils]: 8: Hoare triple {54883#true} assume true; {54883#true} is VALID [2018-11-18 23:30:34,058 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {54883#true} {54883#true} #697#return; {54883#true} is VALID [2018-11-18 23:30:34,058 INFO L273 TraceCheckUtils]: 10: Hoare triple {54883#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {54883#true} is VALID [2018-11-18 23:30:34,058 INFO L273 TraceCheckUtils]: 11: Hoare triple {54883#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {54883#true} is VALID [2018-11-18 23:30:34,058 INFO L256 TraceCheckUtils]: 12: Hoare triple {54883#true} call stub_driver_init(); {54883#true} is VALID [2018-11-18 23:30:34,059 INFO L273 TraceCheckUtils]: 13: Hoare triple {54883#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {54883#true} is VALID [2018-11-18 23:30:34,059 INFO L273 TraceCheckUtils]: 14: Hoare triple {54883#true} assume true; {54883#true} is VALID [2018-11-18 23:30:34,059 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {54883#true} {54883#true} #699#return; {54883#true} is VALID [2018-11-18 23:30:34,059 INFO L273 TraceCheckUtils]: 16: Hoare triple {54883#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {54883#true} is VALID [2018-11-18 23:30:34,059 INFO L273 TraceCheckUtils]: 17: Hoare triple {54883#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {54883#true} is VALID [2018-11-18 23:30:34,059 INFO L273 TraceCheckUtils]: 18: Hoare triple {54883#true} assume 2 == ~tmp_ndt_2~0; {54883#true} is VALID [2018-11-18 23:30:34,059 INFO L256 TraceCheckUtils]: 19: Hoare triple {54883#true} call #t~ret109 := DiskPerfDeviceControl(~devobj~0, ~pirp~0); {54883#true} is VALID [2018-11-18 23:30:34,059 INFO L273 TraceCheckUtils]: 20: Hoare triple {54883#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet50;havoc #t~nondet50;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~4 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~DeviceObject__DeviceExtension~5 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~deviceExtension__TargetDeviceObject~4 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__OutputBufferLength~0 := #t~nondet55;havoc #t~nondet55;assume -2147483648 <= #t~nondet56 && #t~nondet56 <= 2147483647;~sizeof__DISK_PERFORMANCE~0 := #t~nondet56;havoc #t~nondet56;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~deviceExtension__DiskCounters~0 := #t~nondet57;havoc #t~nondet57;assume -2147483648 <= #t~nondet58 && #t~nondet58 <= 2147483647;~Irp__AssociatedIrp__SystemBuffer~0 := #t~nondet58;havoc #t~nondet58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~deviceExtension__Processors~0 := #t~nondet59;havoc #t~nondet59;havoc ~totalCounters__QueueDepth~0;assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~deviceExtension__QueueDepth~0 := #t~nondet60;havoc #t~nondet60;havoc ~Irp__IoStatus__Status~2;havoc ~deviceExtension~5;havoc ~currentIrpStack~0;havoc ~status~4;havoc ~i~0;havoc ~totalCounters~0;havoc ~diskCounters~0;havoc ~tmp~3;havoc ~__cil_tmp24~0;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;~deviceExtension~5 := ~DeviceObject__DeviceExtension~5;~currentIrpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~4;~__cil_tmp24~0 := 32;~__cil_tmp25~0 := 458752;~__cil_tmp26~0 := 458784; {54883#true} is VALID [2018-11-18 23:30:34,059 INFO L273 TraceCheckUtils]: 21: Hoare triple {54883#true} assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp26~0; {54883#true} is VALID [2018-11-18 23:30:34,060 INFO L273 TraceCheckUtils]: 22: Hoare triple {54883#true} assume !(~currentIrpStack__Parameters__DeviceIoControl__OutputBufferLength~0 < ~sizeof__DISK_PERFORMANCE~0);~diskCounters~0 := ~deviceExtension__DiskCounters~0; {54883#true} is VALID [2018-11-18 23:30:34,060 INFO L273 TraceCheckUtils]: 23: Hoare triple {54883#true} assume !(0 == ~diskCounters~0);~totalCounters~0 := ~Irp__AssociatedIrp__SystemBuffer~0;~i~0 := 0; {54883#true} is VALID [2018-11-18 23:30:34,060 INFO L273 TraceCheckUtils]: 24: Hoare triple {54883#true} assume true; {54883#true} is VALID [2018-11-18 23:30:34,060 INFO L273 TraceCheckUtils]: 25: Hoare triple {54883#true} assume !false; {54883#true} is VALID [2018-11-18 23:30:34,060 INFO L273 TraceCheckUtils]: 26: Hoare triple {54883#true} assume ~i~0 >= ~deviceExtension__Processors~0; {54883#true} is VALID [2018-11-18 23:30:34,061 INFO L273 TraceCheckUtils]: 27: Hoare triple {54883#true} ~totalCounters__QueueDepth~0 := ~deviceExtension__QueueDepth~0;~status~4 := 0;~Irp__IoStatus__Information~1 := ~sizeof__DISK_PERFORMANCE~0; {54885#(= 0 DiskPerfDeviceControl_~status~4)} is VALID [2018-11-18 23:30:34,061 INFO L273 TraceCheckUtils]: 28: Hoare triple {54885#(= 0 DiskPerfDeviceControl_~status~4)} ~Irp__IoStatus__Status~2 := ~status~4;~myStatus~0 := ~status~4; {54885#(= 0 DiskPerfDeviceControl_~status~4)} is VALID [2018-11-18 23:30:34,061 INFO L256 TraceCheckUtils]: 29: Hoare triple {54885#(= 0 DiskPerfDeviceControl_~status~4)} call IofCompleteRequest(~Irp, 0); {54883#true} is VALID [2018-11-18 23:30:34,061 INFO L273 TraceCheckUtils]: 30: Hoare triple {54883#true} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {54883#true} is VALID [2018-11-18 23:30:34,061 INFO L273 TraceCheckUtils]: 31: Hoare triple {54883#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {54883#true} is VALID [2018-11-18 23:30:34,061 INFO L273 TraceCheckUtils]: 32: Hoare triple {54883#true} assume true; {54883#true} is VALID [2018-11-18 23:30:34,062 INFO L268 TraceCheckUtils]: 33: Hoare quadruple {54883#true} {54885#(= 0 DiskPerfDeviceControl_~status~4)} #785#return; {54885#(= 0 DiskPerfDeviceControl_~status~4)} is VALID [2018-11-18 23:30:34,062 INFO L273 TraceCheckUtils]: 34: Hoare triple {54885#(= 0 DiskPerfDeviceControl_~status~4)} #res := ~status~4; {54886#(= 0 |DiskPerfDeviceControl_#res|)} is VALID [2018-11-18 23:30:34,063 INFO L273 TraceCheckUtils]: 35: Hoare triple {54886#(= 0 |DiskPerfDeviceControl_#res|)} assume true; {54886#(= 0 |DiskPerfDeviceControl_#res|)} is VALID [2018-11-18 23:30:34,063 INFO L268 TraceCheckUtils]: 36: Hoare quadruple {54886#(= 0 |DiskPerfDeviceControl_#res|)} {54883#true} #703#return; {54887#(= 0 |main_#t~ret109|)} is VALID [2018-11-18 23:30:34,064 INFO L273 TraceCheckUtils]: 37: Hoare triple {54887#(= 0 |main_#t~ret109|)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~6 := #t~ret109;havoc #t~ret109; {54888#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:34,064 INFO L273 TraceCheckUtils]: 38: Hoare triple {54888#(= 0 main_~status~6)} assume !(0 != ~we_should_unload~0); {54888#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:34,064 INFO L273 TraceCheckUtils]: 39: Hoare triple {54888#(= 0 main_~status~6)} assume !(1 == ~pended~0); {54888#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:34,065 INFO L273 TraceCheckUtils]: 40: Hoare triple {54888#(= 0 main_~status~6)} assume !(1 == ~pended~0); {54888#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:34,065 INFO L273 TraceCheckUtils]: 41: Hoare triple {54888#(= 0 main_~status~6)} assume ~s~0 != ~UNLOADED~0; {54888#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:34,066 INFO L273 TraceCheckUtils]: 42: Hoare triple {54888#(= 0 main_~status~6)} assume -1 != ~status~6; {54888#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:34,066 INFO L273 TraceCheckUtils]: 43: Hoare triple {54888#(= 0 main_~status~6)} assume ~s~0 != ~SKIP2~0; {54888#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:34,067 INFO L273 TraceCheckUtils]: 44: Hoare triple {54888#(= 0 main_~status~6)} assume ~s~0 != ~IPC~0; {54888#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:34,067 INFO L273 TraceCheckUtils]: 45: Hoare triple {54888#(= 0 main_~status~6)} assume !(~s~0 != ~DC~0); {54888#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:34,068 INFO L273 TraceCheckUtils]: 46: Hoare triple {54888#(= 0 main_~status~6)} assume !(1 == ~pended~0); {54888#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:34,068 INFO L273 TraceCheckUtils]: 47: Hoare triple {54888#(= 0 main_~status~6)} assume ~s~0 == ~DC~0; {54888#(= 0 main_~status~6)} is VALID [2018-11-18 23:30:34,069 INFO L273 TraceCheckUtils]: 48: Hoare triple {54888#(= 0 main_~status~6)} assume 259 == ~status~6; {54884#false} is VALID [2018-11-18 23:30:34,069 INFO L256 TraceCheckUtils]: 49: Hoare triple {54884#false} call errorFn(); {54884#false} is VALID [2018-11-18 23:30:34,069 INFO L273 TraceCheckUtils]: 50: Hoare triple {54884#false} assume !false; {54884#false} is VALID [2018-11-18 23:30:34,072 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:30:34,072 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:30:34,072 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 23:30:34,073 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 51 [2018-11-18 23:30:34,073 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:30:34,073 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2018-11-18 23:30:34,127 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:34,127 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-18 23:30:34,127 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-18 23:30:34,128 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-18 23:30:34,128 INFO L87 Difference]: Start difference. First operand 419 states and 551 transitions. Second operand 6 states. [2018-11-18 23:30:36,704 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:36,704 INFO L93 Difference]: Finished difference Result 434 states and 567 transitions. [2018-11-18 23:30:36,704 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-18 23:30:36,704 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 51 [2018-11-18 23:30:36,705 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:30:36,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-18 23:30:36,707 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 316 transitions. [2018-11-18 23:30:36,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-18 23:30:36,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 316 transitions. [2018-11-18 23:30:36,710 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 316 transitions. [2018-11-18 23:30:37,030 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 316 edges. 316 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:37,042 INFO L225 Difference]: With dead ends: 434 [2018-11-18 23:30:37,042 INFO L226 Difference]: Without dead ends: 400 [2018-11-18 23:30:37,043 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-18 23:30:37,043 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 400 states. [2018-11-18 23:30:38,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 400 to 400. [2018-11-18 23:30:38,812 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:30:38,812 INFO L82 GeneralOperation]: Start isEquivalent. First operand 400 states. Second operand 400 states. [2018-11-18 23:30:38,812 INFO L74 IsIncluded]: Start isIncluded. First operand 400 states. Second operand 400 states. [2018-11-18 23:30:38,812 INFO L87 Difference]: Start difference. First operand 400 states. Second operand 400 states. [2018-11-18 23:30:38,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:38,823 INFO L93 Difference]: Finished difference Result 400 states and 530 transitions. [2018-11-18 23:30:38,824 INFO L276 IsEmpty]: Start isEmpty. Operand 400 states and 530 transitions. [2018-11-18 23:30:38,824 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:38,824 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:38,824 INFO L74 IsIncluded]: Start isIncluded. First operand 400 states. Second operand 400 states. [2018-11-18 23:30:38,824 INFO L87 Difference]: Start difference. First operand 400 states. Second operand 400 states. [2018-11-18 23:30:38,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:38,835 INFO L93 Difference]: Finished difference Result 400 states and 530 transitions. [2018-11-18 23:30:38,835 INFO L276 IsEmpty]: Start isEmpty. Operand 400 states and 530 transitions. [2018-11-18 23:30:38,836 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:38,836 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:38,836 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:30:38,836 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:30:38,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 400 states. [2018-11-18 23:30:38,847 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 400 states to 400 states and 530 transitions. [2018-11-18 23:30:38,847 INFO L78 Accepts]: Start accepts. Automaton has 400 states and 530 transitions. Word has length 51 [2018-11-18 23:30:38,847 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:30:38,847 INFO L480 AbstractCegarLoop]: Abstraction has 400 states and 530 transitions. [2018-11-18 23:30:38,847 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-18 23:30:38,847 INFO L276 IsEmpty]: Start isEmpty. Operand 400 states and 530 transitions. [2018-11-18 23:30:38,848 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-18 23:30:38,848 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:30:38,848 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:30:38,848 INFO L423 AbstractCegarLoop]: === Iteration 20 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:30:38,848 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:30:38,848 INFO L82 PathProgramCache]: Analyzing trace with hash -569080051, now seen corresponding path program 1 times [2018-11-18 23:30:38,848 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:30:38,849 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:30:38,849 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:38,849 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:30:38,849 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:38,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:30:39,029 INFO L256 TraceCheckUtils]: 0: Hoare triple {56830#true} call ULTIMATE.init(); {56830#true} is VALID [2018-11-18 23:30:39,030 INFO L273 TraceCheckUtils]: 1: Hoare triple {56830#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {56830#true} is VALID [2018-11-18 23:30:39,030 INFO L273 TraceCheckUtils]: 2: Hoare triple {56830#true} assume true; {56830#true} is VALID [2018-11-18 23:30:39,030 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {56830#true} {56830#true} #813#return; {56830#true} is VALID [2018-11-18 23:30:39,030 INFO L256 TraceCheckUtils]: 4: Hoare triple {56830#true} call #t~ret127 := main(); {56830#true} is VALID [2018-11-18 23:30:39,030 INFO L273 TraceCheckUtils]: 5: Hoare triple {56830#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {56830#true} is VALID [2018-11-18 23:30:39,030 INFO L256 TraceCheckUtils]: 6: Hoare triple {56830#true} call _BLAST_init(); {56830#true} is VALID [2018-11-18 23:30:39,030 INFO L273 TraceCheckUtils]: 7: Hoare triple {56830#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {56830#true} is VALID [2018-11-18 23:30:39,031 INFO L273 TraceCheckUtils]: 8: Hoare triple {56830#true} assume true; {56830#true} is VALID [2018-11-18 23:30:39,031 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {56830#true} {56830#true} #697#return; {56830#true} is VALID [2018-11-18 23:30:39,031 INFO L273 TraceCheckUtils]: 10: Hoare triple {56830#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {56830#true} is VALID [2018-11-18 23:30:39,031 INFO L273 TraceCheckUtils]: 11: Hoare triple {56830#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {56830#true} is VALID [2018-11-18 23:30:39,031 INFO L256 TraceCheckUtils]: 12: Hoare triple {56830#true} call stub_driver_init(); {56830#true} is VALID [2018-11-18 23:30:39,031 INFO L273 TraceCheckUtils]: 13: Hoare triple {56830#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {56830#true} is VALID [2018-11-18 23:30:39,031 INFO L273 TraceCheckUtils]: 14: Hoare triple {56830#true} assume true; {56830#true} is VALID [2018-11-18 23:30:39,031 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {56830#true} {56830#true} #699#return; {56830#true} is VALID [2018-11-18 23:30:39,031 INFO L273 TraceCheckUtils]: 16: Hoare triple {56830#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {56830#true} is VALID [2018-11-18 23:30:39,032 INFO L273 TraceCheckUtils]: 17: Hoare triple {56830#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {56830#true} is VALID [2018-11-18 23:30:39,032 INFO L273 TraceCheckUtils]: 18: Hoare triple {56830#true} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {56830#true} is VALID [2018-11-18 23:30:39,032 INFO L273 TraceCheckUtils]: 19: Hoare triple {56830#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet106 && #t~nondet106 <= 2147483647;~tmp_ndt_4~0 := #t~nondet106;havoc #t~nondet106; {56830#true} is VALID [2018-11-18 23:30:39,032 INFO L273 TraceCheckUtils]: 20: Hoare triple {56830#true} assume 4 == ~tmp_ndt_4~0; {56830#true} is VALID [2018-11-18 23:30:39,032 INFO L256 TraceCheckUtils]: 21: Hoare triple {56830#true} call #t~ret111 := DiskPerfDispatchPower(~devobj~0, ~pirp~0); {56830#true} is VALID [2018-11-18 23:30:39,032 INFO L273 TraceCheckUtils]: 22: Hoare triple {56830#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet21;havoc #t~nondet21;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~DeviceObject__DeviceExtension~3 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~deviceExtension__TargetDeviceObject~2 := #t~nondet23;havoc #t~nondet23;havoc ~deviceExtension~3;havoc ~tmp~2; {56830#true} is VALID [2018-11-18 23:30:39,032 INFO L273 TraceCheckUtils]: 23: Hoare triple {56830#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {56830#true} is VALID [2018-11-18 23:30:39,032 INFO L273 TraceCheckUtils]: 24: Hoare triple {56830#true} #t~post24 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post24;havoc #t~post24;#t~post25 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post25;havoc #t~post25;~deviceExtension~3 := ~DeviceObject__DeviceExtension~3; {56830#true} is VALID [2018-11-18 23:30:39,033 INFO L256 TraceCheckUtils]: 25: Hoare triple {56830#true} call #t~ret26 := PoCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); {56830#true} is VALID [2018-11-18 23:30:39,033 INFO L273 TraceCheckUtils]: 26: Hoare triple {56830#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~lcontext~1 := #t~nondet122;havoc #t~nondet122;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~0; {56830#true} is VALID [2018-11-18 23:30:39,033 INFO L273 TraceCheckUtils]: 27: Hoare triple {56830#true} assume !(0 != ~compRegistered~0); {56830#true} is VALID [2018-11-18 23:30:39,033 INFO L273 TraceCheckUtils]: 28: Hoare triple {56830#true} havoc ~tmp_ndt_11~0;assume -2147483648 <= #t~nondet125 && #t~nondet125 <= 2147483647;~tmp_ndt_11~0 := #t~nondet125;havoc #t~nondet125; {56830#true} is VALID [2018-11-18 23:30:39,033 INFO L273 TraceCheckUtils]: 29: Hoare triple {56830#true} assume 0 == ~tmp_ndt_11~0; {56830#true} is VALID [2018-11-18 23:30:39,035 INFO L273 TraceCheckUtils]: 30: Hoare triple {56830#true} ~returnVal~0 := 0; {56832#(= 0 PoCallDriver_~returnVal~0)} is VALID [2018-11-18 23:30:39,035 INFO L273 TraceCheckUtils]: 31: Hoare triple {56832#(= 0 PoCallDriver_~returnVal~0)} assume !(~s~0 == ~NP~0); {56832#(= 0 PoCallDriver_~returnVal~0)} is VALID [2018-11-18 23:30:39,037 INFO L273 TraceCheckUtils]: 32: Hoare triple {56832#(= 0 PoCallDriver_~returnVal~0)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~0 := ~returnVal~0; {56833#(= 0 PoCallDriver_~__cil_tmp8~0)} is VALID [2018-11-18 23:30:39,037 INFO L273 TraceCheckUtils]: 33: Hoare triple {56833#(= 0 PoCallDriver_~__cil_tmp8~0)} assume 259 == ~__cil_tmp8~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {56831#false} is VALID [2018-11-18 23:30:39,037 INFO L273 TraceCheckUtils]: 34: Hoare triple {56831#false} #res := ~returnVal~0; {56831#false} is VALID [2018-11-18 23:30:39,037 INFO L273 TraceCheckUtils]: 35: Hoare triple {56831#false} assume true; {56831#false} is VALID [2018-11-18 23:30:39,037 INFO L268 TraceCheckUtils]: 36: Hoare quadruple {56831#false} {56830#true} #733#return; {56831#false} is VALID [2018-11-18 23:30:39,038 INFO L273 TraceCheckUtils]: 37: Hoare triple {56831#false} assume -2147483648 <= #t~ret26 && #t~ret26 <= 2147483647;~tmp~2 := #t~ret26;havoc #t~ret26;#res := ~tmp~2; {56831#false} is VALID [2018-11-18 23:30:39,038 INFO L273 TraceCheckUtils]: 38: Hoare triple {56831#false} assume true; {56831#false} is VALID [2018-11-18 23:30:39,038 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {56831#false} {56830#true} #707#return; {56831#false} is VALID [2018-11-18 23:30:39,038 INFO L273 TraceCheckUtils]: 40: Hoare triple {56831#false} assume -2147483648 <= #t~ret111 && #t~ret111 <= 2147483647;~status~6 := #t~ret111;havoc #t~ret111; {56831#false} is VALID [2018-11-18 23:30:39,038 INFO L273 TraceCheckUtils]: 41: Hoare triple {56831#false} assume !(0 != ~we_should_unload~0); {56831#false} is VALID [2018-11-18 23:30:39,038 INFO L273 TraceCheckUtils]: 42: Hoare triple {56831#false} assume !(1 == ~pended~0); {56831#false} is VALID [2018-11-18 23:30:39,038 INFO L273 TraceCheckUtils]: 43: Hoare triple {56831#false} assume !(1 == ~pended~0); {56831#false} is VALID [2018-11-18 23:30:39,038 INFO L273 TraceCheckUtils]: 44: Hoare triple {56831#false} assume ~s~0 != ~UNLOADED~0; {56831#false} is VALID [2018-11-18 23:30:39,039 INFO L273 TraceCheckUtils]: 45: Hoare triple {56831#false} assume -1 != ~status~6; {56831#false} is VALID [2018-11-18 23:30:39,039 INFO L273 TraceCheckUtils]: 46: Hoare triple {56831#false} assume ~s~0 != ~SKIP2~0; {56831#false} is VALID [2018-11-18 23:30:39,039 INFO L273 TraceCheckUtils]: 47: Hoare triple {56831#false} assume ~s~0 != ~IPC~0; {56831#false} is VALID [2018-11-18 23:30:39,039 INFO L273 TraceCheckUtils]: 48: Hoare triple {56831#false} assume ~s~0 != ~DC~0; {56831#false} is VALID [2018-11-18 23:30:39,039 INFO L256 TraceCheckUtils]: 49: Hoare triple {56831#false} call errorFn(); {56831#false} is VALID [2018-11-18 23:30:39,039 INFO L273 TraceCheckUtils]: 50: Hoare triple {56831#false} assume !false; {56831#false} is VALID [2018-11-18 23:30:39,040 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:30:39,040 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:30:39,041 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:30:39,041 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 51 [2018-11-18 23:30:39,041 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:30:39,041 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:30:39,089 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:39,090 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:30:39,090 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:30:39,090 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:30:39,090 INFO L87 Difference]: Start difference. First operand 400 states and 530 transitions. Second operand 4 states. [2018-11-18 23:30:41,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:41,888 INFO L93 Difference]: Finished difference Result 436 states and 570 transitions. [2018-11-18 23:30:41,888 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:30:41,888 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 51 [2018-11-18 23:30:41,888 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:30:41,888 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:30:41,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 322 transitions. [2018-11-18 23:30:41,891 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:30:41,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 322 transitions. [2018-11-18 23:30:41,894 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 322 transitions. [2018-11-18 23:30:42,273 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 322 edges. 322 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:42,288 INFO L225 Difference]: With dead ends: 436 [2018-11-18 23:30:42,288 INFO L226 Difference]: Without dead ends: 410 [2018-11-18 23:30:42,289 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:30:42,290 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 410 states. [2018-11-18 23:30:43,295 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 410 to 403. [2018-11-18 23:30:43,296 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:30:43,296 INFO L82 GeneralOperation]: Start isEquivalent. First operand 410 states. Second operand 403 states. [2018-11-18 23:30:43,296 INFO L74 IsIncluded]: Start isIncluded. First operand 410 states. Second operand 403 states. [2018-11-18 23:30:43,296 INFO L87 Difference]: Start difference. First operand 410 states. Second operand 403 states. [2018-11-18 23:30:43,307 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:43,307 INFO L93 Difference]: Finished difference Result 410 states and 541 transitions. [2018-11-18 23:30:43,307 INFO L276 IsEmpty]: Start isEmpty. Operand 410 states and 541 transitions. [2018-11-18 23:30:43,308 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:43,308 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:43,308 INFO L74 IsIncluded]: Start isIncluded. First operand 403 states. Second operand 410 states. [2018-11-18 23:30:43,308 INFO L87 Difference]: Start difference. First operand 403 states. Second operand 410 states. [2018-11-18 23:30:43,319 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:43,319 INFO L93 Difference]: Finished difference Result 410 states and 541 transitions. [2018-11-18 23:30:43,319 INFO L276 IsEmpty]: Start isEmpty. Operand 410 states and 541 transitions. [2018-11-18 23:30:43,320 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:43,320 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:43,320 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:30:43,320 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:30:43,320 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 403 states. [2018-11-18 23:30:43,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 403 states to 403 states and 534 transitions. [2018-11-18 23:30:43,331 INFO L78 Accepts]: Start accepts. Automaton has 403 states and 534 transitions. Word has length 51 [2018-11-18 23:30:43,331 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:30:43,331 INFO L480 AbstractCegarLoop]: Abstraction has 403 states and 534 transitions. [2018-11-18 23:30:43,331 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:30:43,331 INFO L276 IsEmpty]: Start isEmpty. Operand 403 states and 534 transitions. [2018-11-18 23:30:43,331 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-18 23:30:43,332 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:30:43,332 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:30:43,332 INFO L423 AbstractCegarLoop]: === Iteration 21 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:30:43,332 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:30:43,332 INFO L82 PathProgramCache]: Analyzing trace with hash 1731742539, now seen corresponding path program 1 times [2018-11-18 23:30:43,332 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:30:43,332 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:30:43,333 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:43,333 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:30:43,333 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:43,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:30:43,440 INFO L256 TraceCheckUtils]: 0: Hoare triple {58798#true} call ULTIMATE.init(); {58798#true} is VALID [2018-11-18 23:30:43,441 INFO L273 TraceCheckUtils]: 1: Hoare triple {58798#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {58798#true} is VALID [2018-11-18 23:30:43,441 INFO L273 TraceCheckUtils]: 2: Hoare triple {58798#true} assume true; {58798#true} is VALID [2018-11-18 23:30:43,441 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {58798#true} {58798#true} #813#return; {58798#true} is VALID [2018-11-18 23:30:43,442 INFO L256 TraceCheckUtils]: 4: Hoare triple {58798#true} call #t~ret127 := main(); {58798#true} is VALID [2018-11-18 23:30:43,442 INFO L273 TraceCheckUtils]: 5: Hoare triple {58798#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {58798#true} is VALID [2018-11-18 23:30:43,442 INFO L256 TraceCheckUtils]: 6: Hoare triple {58798#true} call _BLAST_init(); {58798#true} is VALID [2018-11-18 23:30:43,443 INFO L273 TraceCheckUtils]: 7: Hoare triple {58798#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} is VALID [2018-11-18 23:30:43,443 INFO L273 TraceCheckUtils]: 8: Hoare triple {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} assume true; {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} is VALID [2018-11-18 23:30:43,443 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} {58798#true} #697#return; {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} is VALID [2018-11-18 23:30:43,444 INFO L273 TraceCheckUtils]: 10: Hoare triple {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} is VALID [2018-11-18 23:30:43,444 INFO L273 TraceCheckUtils]: 11: Hoare triple {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} is VALID [2018-11-18 23:30:43,444 INFO L256 TraceCheckUtils]: 12: Hoare triple {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} call stub_driver_init(); {58798#true} is VALID [2018-11-18 23:30:43,444 INFO L273 TraceCheckUtils]: 13: Hoare triple {58798#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {58798#true} is VALID [2018-11-18 23:30:43,444 INFO L273 TraceCheckUtils]: 14: Hoare triple {58798#true} assume true; {58798#true} is VALID [2018-11-18 23:30:43,445 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {58798#true} {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} #699#return; {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} is VALID [2018-11-18 23:30:43,446 INFO L273 TraceCheckUtils]: 16: Hoare triple {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} is VALID [2018-11-18 23:30:43,446 INFO L273 TraceCheckUtils]: 17: Hoare triple {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} is VALID [2018-11-18 23:30:43,447 INFO L273 TraceCheckUtils]: 18: Hoare triple {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} is VALID [2018-11-18 23:30:43,447 INFO L273 TraceCheckUtils]: 19: Hoare triple {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet106 && #t~nondet106 <= 2147483647;~tmp_ndt_4~0 := #t~nondet106;havoc #t~nondet106; {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} is VALID [2018-11-18 23:30:43,448 INFO L273 TraceCheckUtils]: 20: Hoare triple {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} assume 4 == ~tmp_ndt_4~0; {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} is VALID [2018-11-18 23:30:43,448 INFO L256 TraceCheckUtils]: 21: Hoare triple {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} call #t~ret111 := DiskPerfDispatchPower(~devobj~0, ~pirp~0); {58798#true} is VALID [2018-11-18 23:30:43,448 INFO L273 TraceCheckUtils]: 22: Hoare triple {58798#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet21;havoc #t~nondet21;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~DeviceObject__DeviceExtension~3 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~deviceExtension__TargetDeviceObject~2 := #t~nondet23;havoc #t~nondet23;havoc ~deviceExtension~3;havoc ~tmp~2; {58798#true} is VALID [2018-11-18 23:30:43,449 INFO L273 TraceCheckUtils]: 23: Hoare triple {58798#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {58801#(<= ~s~0 ~SKIP1~0)} is VALID [2018-11-18 23:30:43,449 INFO L273 TraceCheckUtils]: 24: Hoare triple {58801#(<= ~s~0 ~SKIP1~0)} #t~post24 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post24;havoc #t~post24;#t~post25 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post25;havoc #t~post25;~deviceExtension~3 := ~DeviceObject__DeviceExtension~3; {58801#(<= ~s~0 ~SKIP1~0)} is VALID [2018-11-18 23:30:43,450 INFO L256 TraceCheckUtils]: 25: Hoare triple {58801#(<= ~s~0 ~SKIP1~0)} call #t~ret26 := PoCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); {58802#(= |old(~s~0)| ~s~0)} is VALID [2018-11-18 23:30:43,451 INFO L273 TraceCheckUtils]: 26: Hoare triple {58802#(= |old(~s~0)| ~s~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~lcontext~1 := #t~nondet122;havoc #t~nondet122;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~0; {58802#(= |old(~s~0)| ~s~0)} is VALID [2018-11-18 23:30:43,451 INFO L273 TraceCheckUtils]: 27: Hoare triple {58802#(= |old(~s~0)| ~s~0)} assume !(0 != ~compRegistered~0); {58802#(= |old(~s~0)| ~s~0)} is VALID [2018-11-18 23:30:43,452 INFO L273 TraceCheckUtils]: 28: Hoare triple {58802#(= |old(~s~0)| ~s~0)} havoc ~tmp_ndt_11~0;assume -2147483648 <= #t~nondet125 && #t~nondet125 <= 2147483647;~tmp_ndt_11~0 := #t~nondet125;havoc #t~nondet125; {58802#(= |old(~s~0)| ~s~0)} is VALID [2018-11-18 23:30:43,453 INFO L273 TraceCheckUtils]: 29: Hoare triple {58802#(= |old(~s~0)| ~s~0)} assume 0 == ~tmp_ndt_11~0; {58802#(= |old(~s~0)| ~s~0)} is VALID [2018-11-18 23:30:43,453 INFO L273 TraceCheckUtils]: 30: Hoare triple {58802#(= |old(~s~0)| ~s~0)} ~returnVal~0 := 0; {58802#(= |old(~s~0)| ~s~0)} is VALID [2018-11-18 23:30:43,454 INFO L273 TraceCheckUtils]: 31: Hoare triple {58802#(= |old(~s~0)| ~s~0)} assume !(~s~0 == ~NP~0); {58802#(= |old(~s~0)| ~s~0)} is VALID [2018-11-18 23:30:43,454 INFO L273 TraceCheckUtils]: 32: Hoare triple {58802#(= |old(~s~0)| ~s~0)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~0 := ~returnVal~0; {58803#(= ~MPR1~0 |old(~s~0)|)} is VALID [2018-11-18 23:30:43,455 INFO L273 TraceCheckUtils]: 33: Hoare triple {58803#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {58803#(= ~MPR1~0 |old(~s~0)|)} is VALID [2018-11-18 23:30:43,455 INFO L273 TraceCheckUtils]: 34: Hoare triple {58803#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {58803#(= ~MPR1~0 |old(~s~0)|)} is VALID [2018-11-18 23:30:43,456 INFO L273 TraceCheckUtils]: 35: Hoare triple {58803#(= ~MPR1~0 |old(~s~0)|)} assume true; {58803#(= ~MPR1~0 |old(~s~0)|)} is VALID [2018-11-18 23:30:43,457 INFO L268 TraceCheckUtils]: 36: Hoare quadruple {58803#(= ~MPR1~0 |old(~s~0)|)} {58801#(<= ~s~0 ~SKIP1~0)} #733#return; {58804#(<= ~MPR1~0 ~SKIP1~0)} is VALID [2018-11-18 23:30:43,457 INFO L273 TraceCheckUtils]: 37: Hoare triple {58804#(<= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret26 && #t~ret26 <= 2147483647;~tmp~2 := #t~ret26;havoc #t~ret26;#res := ~tmp~2; {58804#(<= ~MPR1~0 ~SKIP1~0)} is VALID [2018-11-18 23:30:43,458 INFO L273 TraceCheckUtils]: 38: Hoare triple {58804#(<= ~MPR1~0 ~SKIP1~0)} assume true; {58804#(<= ~MPR1~0 ~SKIP1~0)} is VALID [2018-11-18 23:30:43,459 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {58804#(<= ~MPR1~0 ~SKIP1~0)} {58800#(<= (+ ~SKIP1~0 2) ~MPR1~0)} #707#return; {58799#false} is VALID [2018-11-18 23:30:43,459 INFO L273 TraceCheckUtils]: 40: Hoare triple {58799#false} assume -2147483648 <= #t~ret111 && #t~ret111 <= 2147483647;~status~6 := #t~ret111;havoc #t~ret111; {58799#false} is VALID [2018-11-18 23:30:43,460 INFO L273 TraceCheckUtils]: 41: Hoare triple {58799#false} assume !(0 != ~we_should_unload~0); {58799#false} is VALID [2018-11-18 23:30:43,460 INFO L273 TraceCheckUtils]: 42: Hoare triple {58799#false} assume !(1 == ~pended~0); {58799#false} is VALID [2018-11-18 23:30:43,460 INFO L273 TraceCheckUtils]: 43: Hoare triple {58799#false} assume !(1 == ~pended~0); {58799#false} is VALID [2018-11-18 23:30:43,460 INFO L273 TraceCheckUtils]: 44: Hoare triple {58799#false} assume ~s~0 != ~UNLOADED~0; {58799#false} is VALID [2018-11-18 23:30:43,460 INFO L273 TraceCheckUtils]: 45: Hoare triple {58799#false} assume -1 != ~status~6; {58799#false} is VALID [2018-11-18 23:30:43,460 INFO L273 TraceCheckUtils]: 46: Hoare triple {58799#false} assume ~s~0 != ~SKIP2~0; {58799#false} is VALID [2018-11-18 23:30:43,461 INFO L273 TraceCheckUtils]: 47: Hoare triple {58799#false} assume ~s~0 != ~IPC~0; {58799#false} is VALID [2018-11-18 23:30:43,461 INFO L273 TraceCheckUtils]: 48: Hoare triple {58799#false} assume ~s~0 != ~DC~0; {58799#false} is VALID [2018-11-18 23:30:43,461 INFO L256 TraceCheckUtils]: 49: Hoare triple {58799#false} call errorFn(); {58799#false} is VALID [2018-11-18 23:30:43,461 INFO L273 TraceCheckUtils]: 50: Hoare triple {58799#false} assume !false; {58799#false} is VALID [2018-11-18 23:30:43,464 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:30:43,464 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:30:43,464 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 23:30:43,464 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 51 [2018-11-18 23:30:43,464 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:30:43,464 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2018-11-18 23:30:43,632 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:43,632 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-18 23:30:43,633 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-18 23:30:43,633 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-18 23:30:43,633 INFO L87 Difference]: Start difference. First operand 403 states and 534 transitions. Second operand 7 states. [2018-11-18 23:30:49,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:49,373 INFO L93 Difference]: Finished difference Result 565 states and 794 transitions. [2018-11-18 23:30:49,373 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-18 23:30:49,373 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 51 [2018-11-18 23:30:49,373 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:30:49,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-18 23:30:49,378 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 450 transitions. [2018-11-18 23:30:49,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-18 23:30:49,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 450 transitions. [2018-11-18 23:30:49,381 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 450 transitions. [2018-11-18 23:30:49,961 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 450 edges. 450 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:49,978 INFO L225 Difference]: With dead ends: 565 [2018-11-18 23:30:49,978 INFO L226 Difference]: Without dead ends: 511 [2018-11-18 23:30:49,979 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=135, Unknown=0, NotChecked=0, Total=182 [2018-11-18 23:30:49,979 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 511 states. [2018-11-18 23:30:52,139 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 511 to 503. [2018-11-18 23:30:52,139 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:30:52,139 INFO L82 GeneralOperation]: Start isEquivalent. First operand 511 states. Second operand 503 states. [2018-11-18 23:30:52,140 INFO L74 IsIncluded]: Start isIncluded. First operand 511 states. Second operand 503 states. [2018-11-18 23:30:52,140 INFO L87 Difference]: Start difference. First operand 511 states. Second operand 503 states. [2018-11-18 23:30:52,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:52,159 INFO L93 Difference]: Finished difference Result 511 states and 727 transitions. [2018-11-18 23:30:52,159 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 727 transitions. [2018-11-18 23:30:52,160 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:52,160 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:52,160 INFO L74 IsIncluded]: Start isIncluded. First operand 503 states. Second operand 511 states. [2018-11-18 23:30:52,160 INFO L87 Difference]: Start difference. First operand 503 states. Second operand 511 states. [2018-11-18 23:30:52,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:52,182 INFO L93 Difference]: Finished difference Result 511 states and 727 transitions. [2018-11-18 23:30:52,182 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 727 transitions. [2018-11-18 23:30:52,183 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:52,183 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:52,184 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:30:52,184 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:30:52,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 503 states. [2018-11-18 23:30:52,205 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 503 states to 503 states and 717 transitions. [2018-11-18 23:30:52,206 INFO L78 Accepts]: Start accepts. Automaton has 503 states and 717 transitions. Word has length 51 [2018-11-18 23:30:52,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:30:52,206 INFO L480 AbstractCegarLoop]: Abstraction has 503 states and 717 transitions. [2018-11-18 23:30:52,206 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-18 23:30:52,206 INFO L276 IsEmpty]: Start isEmpty. Operand 503 states and 717 transitions. [2018-11-18 23:30:52,206 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-18 23:30:52,206 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:30:52,207 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:30:52,207 INFO L423 AbstractCegarLoop]: === Iteration 22 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:30:52,207 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:30:52,207 INFO L82 PathProgramCache]: Analyzing trace with hash 1878435341, now seen corresponding path program 1 times [2018-11-18 23:30:52,207 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:30:52,207 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:30:52,208 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:52,208 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:30:52,209 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:52,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:30:52,420 INFO L256 TraceCheckUtils]: 0: Hoare triple {61277#true} call ULTIMATE.init(); {61277#true} is VALID [2018-11-18 23:30:52,420 INFO L273 TraceCheckUtils]: 1: Hoare triple {61277#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {61277#true} is VALID [2018-11-18 23:30:52,420 INFO L273 TraceCheckUtils]: 2: Hoare triple {61277#true} assume true; {61277#true} is VALID [2018-11-18 23:30:52,420 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {61277#true} {61277#true} #813#return; {61277#true} is VALID [2018-11-18 23:30:52,420 INFO L256 TraceCheckUtils]: 4: Hoare triple {61277#true} call #t~ret127 := main(); {61277#true} is VALID [2018-11-18 23:30:52,421 INFO L273 TraceCheckUtils]: 5: Hoare triple {61277#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {61277#true} is VALID [2018-11-18 23:30:52,421 INFO L256 TraceCheckUtils]: 6: Hoare triple {61277#true} call _BLAST_init(); {61277#true} is VALID [2018-11-18 23:30:52,421 INFO L273 TraceCheckUtils]: 7: Hoare triple {61277#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {61277#true} is VALID [2018-11-18 23:30:52,421 INFO L273 TraceCheckUtils]: 8: Hoare triple {61277#true} assume true; {61277#true} is VALID [2018-11-18 23:30:52,421 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {61277#true} {61277#true} #697#return; {61277#true} is VALID [2018-11-18 23:30:52,422 INFO L273 TraceCheckUtils]: 10: Hoare triple {61277#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {61277#true} is VALID [2018-11-18 23:30:52,422 INFO L273 TraceCheckUtils]: 11: Hoare triple {61277#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {61277#true} is VALID [2018-11-18 23:30:52,422 INFO L256 TraceCheckUtils]: 12: Hoare triple {61277#true} call stub_driver_init(); {61277#true} is VALID [2018-11-18 23:30:52,422 INFO L273 TraceCheckUtils]: 13: Hoare triple {61277#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {61277#true} is VALID [2018-11-18 23:30:52,422 INFO L273 TraceCheckUtils]: 14: Hoare triple {61277#true} assume true; {61277#true} is VALID [2018-11-18 23:30:52,422 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {61277#true} {61277#true} #699#return; {61277#true} is VALID [2018-11-18 23:30:52,423 INFO L273 TraceCheckUtils]: 16: Hoare triple {61277#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {61277#true} is VALID [2018-11-18 23:30:52,423 INFO L273 TraceCheckUtils]: 17: Hoare triple {61277#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {61277#true} is VALID [2018-11-18 23:30:52,423 INFO L273 TraceCheckUtils]: 18: Hoare triple {61277#true} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {61277#true} is VALID [2018-11-18 23:30:52,423 INFO L273 TraceCheckUtils]: 19: Hoare triple {61277#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet106 && #t~nondet106 <= 2147483647;~tmp_ndt_4~0 := #t~nondet106;havoc #t~nondet106; {61277#true} is VALID [2018-11-18 23:30:52,423 INFO L273 TraceCheckUtils]: 20: Hoare triple {61277#true} assume 4 == ~tmp_ndt_4~0; {61277#true} is VALID [2018-11-18 23:30:52,424 INFO L256 TraceCheckUtils]: 21: Hoare triple {61277#true} call #t~ret111 := DiskPerfDispatchPower(~devobj~0, ~pirp~0); {61277#true} is VALID [2018-11-18 23:30:52,424 INFO L273 TraceCheckUtils]: 22: Hoare triple {61277#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet21;havoc #t~nondet21;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~DeviceObject__DeviceExtension~3 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~deviceExtension__TargetDeviceObject~2 := #t~nondet23;havoc #t~nondet23;havoc ~deviceExtension~3;havoc ~tmp~2; {61277#true} is VALID [2018-11-18 23:30:52,424 INFO L273 TraceCheckUtils]: 23: Hoare triple {61277#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {61277#true} is VALID [2018-11-18 23:30:52,424 INFO L273 TraceCheckUtils]: 24: Hoare triple {61277#true} #t~post24 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post24;havoc #t~post24;#t~post25 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post25;havoc #t~post25;~deviceExtension~3 := ~DeviceObject__DeviceExtension~3; {61277#true} is VALID [2018-11-18 23:30:52,424 INFO L256 TraceCheckUtils]: 25: Hoare triple {61277#true} call #t~ret26 := PoCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); {61277#true} is VALID [2018-11-18 23:30:52,424 INFO L273 TraceCheckUtils]: 26: Hoare triple {61277#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~lcontext~1 := #t~nondet122;havoc #t~nondet122;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~0; {61277#true} is VALID [2018-11-18 23:30:52,425 INFO L273 TraceCheckUtils]: 27: Hoare triple {61277#true} assume !(0 != ~compRegistered~0); {61277#true} is VALID [2018-11-18 23:30:52,425 INFO L273 TraceCheckUtils]: 28: Hoare triple {61277#true} havoc ~tmp_ndt_11~0;assume -2147483648 <= #t~nondet125 && #t~nondet125 <= 2147483647;~tmp_ndt_11~0 := #t~nondet125;havoc #t~nondet125; {61277#true} is VALID [2018-11-18 23:30:52,425 INFO L273 TraceCheckUtils]: 29: Hoare triple {61277#true} assume 0 == ~tmp_ndt_11~0; {61277#true} is VALID [2018-11-18 23:30:52,425 INFO L273 TraceCheckUtils]: 30: Hoare triple {61277#true} ~returnVal~0 := 0; {61277#true} is VALID [2018-11-18 23:30:52,425 INFO L273 TraceCheckUtils]: 31: Hoare triple {61277#true} assume !(~s~0 == ~NP~0); {61277#true} is VALID [2018-11-18 23:30:52,425 INFO L273 TraceCheckUtils]: 32: Hoare triple {61277#true} assume !(~s~0 == ~MPR1~0); {61277#true} is VALID [2018-11-18 23:30:52,437 INFO L273 TraceCheckUtils]: 33: Hoare triple {61277#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {61279#(= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:30:52,438 INFO L273 TraceCheckUtils]: 34: Hoare triple {61279#(= ~SKIP2~0 ~s~0)} #res := ~returnVal~0; {61279#(= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:30:52,439 INFO L273 TraceCheckUtils]: 35: Hoare triple {61279#(= ~SKIP2~0 ~s~0)} assume true; {61279#(= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:30:52,439 INFO L268 TraceCheckUtils]: 36: Hoare quadruple {61279#(= ~SKIP2~0 ~s~0)} {61277#true} #733#return; {61279#(= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:30:52,441 INFO L273 TraceCheckUtils]: 37: Hoare triple {61279#(= ~SKIP2~0 ~s~0)} assume -2147483648 <= #t~ret26 && #t~ret26 <= 2147483647;~tmp~2 := #t~ret26;havoc #t~ret26;#res := ~tmp~2; {61279#(= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:30:52,441 INFO L273 TraceCheckUtils]: 38: Hoare triple {61279#(= ~SKIP2~0 ~s~0)} assume true; {61279#(= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:30:52,443 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {61279#(= ~SKIP2~0 ~s~0)} {61277#true} #707#return; {61279#(= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:30:52,443 INFO L273 TraceCheckUtils]: 40: Hoare triple {61279#(= ~SKIP2~0 ~s~0)} assume -2147483648 <= #t~ret111 && #t~ret111 <= 2147483647;~status~6 := #t~ret111;havoc #t~ret111; {61279#(= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:30:52,445 INFO L273 TraceCheckUtils]: 41: Hoare triple {61279#(= ~SKIP2~0 ~s~0)} assume !(0 != ~we_should_unload~0); {61279#(= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:30:52,445 INFO L273 TraceCheckUtils]: 42: Hoare triple {61279#(= ~SKIP2~0 ~s~0)} assume !(1 == ~pended~0); {61279#(= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:30:52,447 INFO L273 TraceCheckUtils]: 43: Hoare triple {61279#(= ~SKIP2~0 ~s~0)} assume !(1 == ~pended~0); {61279#(= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:30:52,447 INFO L273 TraceCheckUtils]: 44: Hoare triple {61279#(= ~SKIP2~0 ~s~0)} assume ~s~0 != ~UNLOADED~0; {61279#(= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:30:52,449 INFO L273 TraceCheckUtils]: 45: Hoare triple {61279#(= ~SKIP2~0 ~s~0)} assume -1 != ~status~6; {61279#(= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:30:52,449 INFO L273 TraceCheckUtils]: 46: Hoare triple {61279#(= ~SKIP2~0 ~s~0)} assume ~s~0 != ~SKIP2~0; {61278#false} is VALID [2018-11-18 23:30:52,449 INFO L273 TraceCheckUtils]: 47: Hoare triple {61278#false} assume ~s~0 != ~IPC~0; {61278#false} is VALID [2018-11-18 23:30:52,449 INFO L273 TraceCheckUtils]: 48: Hoare triple {61278#false} assume ~s~0 != ~DC~0; {61278#false} is VALID [2018-11-18 23:30:52,449 INFO L256 TraceCheckUtils]: 49: Hoare triple {61278#false} call errorFn(); {61278#false} is VALID [2018-11-18 23:30:52,449 INFO L273 TraceCheckUtils]: 50: Hoare triple {61278#false} assume !false; {61278#false} is VALID [2018-11-18 23:30:52,451 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:30:52,451 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:30:52,451 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 23:30:52,452 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 51 [2018-11-18 23:30:52,452 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:30:52,452 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-18 23:30:52,506 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:52,506 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 23:30:52,506 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 23:30:52,506 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:30:52,507 INFO L87 Difference]: Start difference. First operand 503 states and 717 transitions. Second operand 3 states. [2018-11-18 23:30:56,024 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:56,024 INFO L93 Difference]: Finished difference Result 673 states and 1007 transitions. [2018-11-18 23:30:56,024 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 23:30:56,024 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 51 [2018-11-18 23:30:56,024 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:30:56,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:30:56,028 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 497 transitions. [2018-11-18 23:30:56,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:30:56,032 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 497 transitions. [2018-11-18 23:30:56,032 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 497 transitions. [2018-11-18 23:30:56,643 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 497 edges. 497 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:30:56,669 INFO L225 Difference]: With dead ends: 673 [2018-11-18 23:30:56,669 INFO L226 Difference]: Without dead ends: 659 [2018-11-18 23:30:56,670 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:30:56,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 659 states. [2018-11-18 23:30:59,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 659 to 575. [2018-11-18 23:30:59,511 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:30:59,511 INFO L82 GeneralOperation]: Start isEquivalent. First operand 659 states. Second operand 575 states. [2018-11-18 23:30:59,512 INFO L74 IsIncluded]: Start isIncluded. First operand 659 states. Second operand 575 states. [2018-11-18 23:30:59,512 INFO L87 Difference]: Start difference. First operand 659 states. Second operand 575 states. [2018-11-18 23:30:59,538 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:59,538 INFO L93 Difference]: Finished difference Result 659 states and 990 transitions. [2018-11-18 23:30:59,538 INFO L276 IsEmpty]: Start isEmpty. Operand 659 states and 990 transitions. [2018-11-18 23:30:59,540 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:59,540 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:59,540 INFO L74 IsIncluded]: Start isIncluded. First operand 575 states. Second operand 659 states. [2018-11-18 23:30:59,540 INFO L87 Difference]: Start difference. First operand 575 states. Second operand 659 states. [2018-11-18 23:30:59,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:30:59,575 INFO L93 Difference]: Finished difference Result 659 states and 990 transitions. [2018-11-18 23:30:59,575 INFO L276 IsEmpty]: Start isEmpty. Operand 659 states and 990 transitions. [2018-11-18 23:30:59,577 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:30:59,578 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:30:59,578 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:30:59,578 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:30:59,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 575 states. [2018-11-18 23:30:59,608 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 575 states to 575 states and 846 transitions. [2018-11-18 23:30:59,608 INFO L78 Accepts]: Start accepts. Automaton has 575 states and 846 transitions. Word has length 51 [2018-11-18 23:30:59,609 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:30:59,609 INFO L480 AbstractCegarLoop]: Abstraction has 575 states and 846 transitions. [2018-11-18 23:30:59,609 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 23:30:59,609 INFO L276 IsEmpty]: Start isEmpty. Operand 575 states and 846 transitions. [2018-11-18 23:30:59,609 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-18 23:30:59,610 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:30:59,610 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:30:59,610 INFO L423 AbstractCegarLoop]: === Iteration 23 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:30:59,610 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:30:59,610 INFO L82 PathProgramCache]: Analyzing trace with hash -1445321105, now seen corresponding path program 1 times [2018-11-18 23:30:59,610 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:30:59,611 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:30:59,611 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:59,611 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:30:59,612 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:30:59,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:31:00,783 INFO L256 TraceCheckUtils]: 0: Hoare triple {64280#true} call ULTIMATE.init(); {64280#true} is VALID [2018-11-18 23:31:00,784 INFO L273 TraceCheckUtils]: 1: Hoare triple {64280#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {64280#true} is VALID [2018-11-18 23:31:00,784 INFO L273 TraceCheckUtils]: 2: Hoare triple {64280#true} assume true; {64280#true} is VALID [2018-11-18 23:31:00,784 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {64280#true} {64280#true} #813#return; {64280#true} is VALID [2018-11-18 23:31:00,784 INFO L256 TraceCheckUtils]: 4: Hoare triple {64280#true} call #t~ret127 := main(); {64280#true} is VALID [2018-11-18 23:31:00,785 INFO L273 TraceCheckUtils]: 5: Hoare triple {64280#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {64280#true} is VALID [2018-11-18 23:31:00,785 INFO L256 TraceCheckUtils]: 6: Hoare triple {64280#true} call _BLAST_init(); {64280#true} is VALID [2018-11-18 23:31:00,785 INFO L273 TraceCheckUtils]: 7: Hoare triple {64280#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {64280#true} is VALID [2018-11-18 23:31:00,785 INFO L273 TraceCheckUtils]: 8: Hoare triple {64280#true} assume true; {64280#true} is VALID [2018-11-18 23:31:00,785 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {64280#true} {64280#true} #697#return; {64280#true} is VALID [2018-11-18 23:31:00,785 INFO L273 TraceCheckUtils]: 10: Hoare triple {64280#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {64280#true} is VALID [2018-11-18 23:31:00,786 INFO L273 TraceCheckUtils]: 11: Hoare triple {64280#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {64280#true} is VALID [2018-11-18 23:31:00,786 INFO L256 TraceCheckUtils]: 12: Hoare triple {64280#true} call stub_driver_init(); {64280#true} is VALID [2018-11-18 23:31:00,786 INFO L273 TraceCheckUtils]: 13: Hoare triple {64280#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {64280#true} is VALID [2018-11-18 23:31:00,786 INFO L273 TraceCheckUtils]: 14: Hoare triple {64280#true} assume true; {64280#true} is VALID [2018-11-18 23:31:00,786 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {64280#true} {64280#true} #699#return; {64280#true} is VALID [2018-11-18 23:31:00,786 INFO L273 TraceCheckUtils]: 16: Hoare triple {64280#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {64280#true} is VALID [2018-11-18 23:31:00,787 INFO L273 TraceCheckUtils]: 17: Hoare triple {64280#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {64280#true} is VALID [2018-11-18 23:31:00,787 INFO L273 TraceCheckUtils]: 18: Hoare triple {64280#true} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {64280#true} is VALID [2018-11-18 23:31:00,787 INFO L273 TraceCheckUtils]: 19: Hoare triple {64280#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet106 && #t~nondet106 <= 2147483647;~tmp_ndt_4~0 := #t~nondet106;havoc #t~nondet106; {64280#true} is VALID [2018-11-18 23:31:00,787 INFO L273 TraceCheckUtils]: 20: Hoare triple {64280#true} assume 4 == ~tmp_ndt_4~0; {64280#true} is VALID [2018-11-18 23:31:00,787 INFO L256 TraceCheckUtils]: 21: Hoare triple {64280#true} call #t~ret111 := DiskPerfDispatchPower(~devobj~0, ~pirp~0); {64280#true} is VALID [2018-11-18 23:31:00,788 INFO L273 TraceCheckUtils]: 22: Hoare triple {64280#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet21;havoc #t~nondet21;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~DeviceObject__DeviceExtension~3 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~deviceExtension__TargetDeviceObject~2 := #t~nondet23;havoc #t~nondet23;havoc ~deviceExtension~3;havoc ~tmp~2; {64280#true} is VALID [2018-11-18 23:31:00,788 INFO L273 TraceCheckUtils]: 23: Hoare triple {64280#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {64280#true} is VALID [2018-11-18 23:31:00,788 INFO L273 TraceCheckUtils]: 24: Hoare triple {64280#true} #t~post24 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post24;havoc #t~post24;#t~post25 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post25;havoc #t~post25;~deviceExtension~3 := ~DeviceObject__DeviceExtension~3; {64280#true} is VALID [2018-11-18 23:31:00,788 INFO L256 TraceCheckUtils]: 25: Hoare triple {64280#true} call #t~ret26 := PoCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); {64280#true} is VALID [2018-11-18 23:31:00,788 INFO L273 TraceCheckUtils]: 26: Hoare triple {64280#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~lcontext~1 := #t~nondet122;havoc #t~nondet122;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~0; {64280#true} is VALID [2018-11-18 23:31:00,788 INFO L273 TraceCheckUtils]: 27: Hoare triple {64280#true} assume !(0 != ~compRegistered~0); {64280#true} is VALID [2018-11-18 23:31:00,789 INFO L273 TraceCheckUtils]: 28: Hoare triple {64280#true} havoc ~tmp_ndt_11~0;assume -2147483648 <= #t~nondet125 && #t~nondet125 <= 2147483647;~tmp_ndt_11~0 := #t~nondet125;havoc #t~nondet125; {64280#true} is VALID [2018-11-18 23:31:00,789 INFO L273 TraceCheckUtils]: 29: Hoare triple {64280#true} assume 0 == ~tmp_ndt_11~0; {64280#true} is VALID [2018-11-18 23:31:00,801 INFO L273 TraceCheckUtils]: 30: Hoare triple {64280#true} ~returnVal~0 := 0; {64282#(= 0 PoCallDriver_~returnVal~0)} is VALID [2018-11-18 23:31:00,814 INFO L273 TraceCheckUtils]: 31: Hoare triple {64282#(= 0 PoCallDriver_~returnVal~0)} assume !(~s~0 == ~NP~0); {64282#(= 0 PoCallDriver_~returnVal~0)} is VALID [2018-11-18 23:31:00,827 INFO L273 TraceCheckUtils]: 32: Hoare triple {64282#(= 0 PoCallDriver_~returnVal~0)} assume !(~s~0 == ~MPR1~0); {64282#(= 0 PoCallDriver_~returnVal~0)} is VALID [2018-11-18 23:31:00,837 INFO L273 TraceCheckUtils]: 33: Hoare triple {64282#(= 0 PoCallDriver_~returnVal~0)} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {64282#(= 0 PoCallDriver_~returnVal~0)} is VALID [2018-11-18 23:31:00,838 INFO L273 TraceCheckUtils]: 34: Hoare triple {64282#(= 0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {64283#(= 0 |PoCallDriver_#res|)} is VALID [2018-11-18 23:31:00,839 INFO L273 TraceCheckUtils]: 35: Hoare triple {64283#(= 0 |PoCallDriver_#res|)} assume true; {64283#(= 0 |PoCallDriver_#res|)} is VALID [2018-11-18 23:31:00,841 INFO L268 TraceCheckUtils]: 36: Hoare quadruple {64283#(= 0 |PoCallDriver_#res|)} {64280#true} #733#return; {64284#(= 0 |DiskPerfDispatchPower_#t~ret26|)} is VALID [2018-11-18 23:31:00,842 INFO L273 TraceCheckUtils]: 37: Hoare triple {64284#(= 0 |DiskPerfDispatchPower_#t~ret26|)} assume -2147483648 <= #t~ret26 && #t~ret26 <= 2147483647;~tmp~2 := #t~ret26;havoc #t~ret26;#res := ~tmp~2; {64285#(= 0 |DiskPerfDispatchPower_#res|)} is VALID [2018-11-18 23:31:00,843 INFO L273 TraceCheckUtils]: 38: Hoare triple {64285#(= 0 |DiskPerfDispatchPower_#res|)} assume true; {64285#(= 0 |DiskPerfDispatchPower_#res|)} is VALID [2018-11-18 23:31:00,843 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {64285#(= 0 |DiskPerfDispatchPower_#res|)} {64280#true} #707#return; {64286#(= 0 |main_#t~ret111|)} is VALID [2018-11-18 23:31:00,845 INFO L273 TraceCheckUtils]: 40: Hoare triple {64286#(= 0 |main_#t~ret111|)} assume -2147483648 <= #t~ret111 && #t~ret111 <= 2147483647;~status~6 := #t~ret111;havoc #t~ret111; {64287#(= 0 main_~status~6)} is VALID [2018-11-18 23:31:00,845 INFO L273 TraceCheckUtils]: 41: Hoare triple {64287#(= 0 main_~status~6)} assume !(0 != ~we_should_unload~0); {64287#(= 0 main_~status~6)} is VALID [2018-11-18 23:31:00,845 INFO L273 TraceCheckUtils]: 42: Hoare triple {64287#(= 0 main_~status~6)} assume !(1 == ~pended~0); {64287#(= 0 main_~status~6)} is VALID [2018-11-18 23:31:00,846 INFO L273 TraceCheckUtils]: 43: Hoare triple {64287#(= 0 main_~status~6)} assume !(1 == ~pended~0); {64287#(= 0 main_~status~6)} is VALID [2018-11-18 23:31:00,846 INFO L273 TraceCheckUtils]: 44: Hoare triple {64287#(= 0 main_~status~6)} assume ~s~0 != ~UNLOADED~0; {64287#(= 0 main_~status~6)} is VALID [2018-11-18 23:31:00,847 INFO L273 TraceCheckUtils]: 45: Hoare triple {64287#(= 0 main_~status~6)} assume -1 != ~status~6; {64287#(= 0 main_~status~6)} is VALID [2018-11-18 23:31:00,847 INFO L273 TraceCheckUtils]: 46: Hoare triple {64287#(= 0 main_~status~6)} assume !(~s~0 != ~SKIP2~0); {64287#(= 0 main_~status~6)} is VALID [2018-11-18 23:31:00,851 INFO L273 TraceCheckUtils]: 47: Hoare triple {64287#(= 0 main_~status~6)} assume !(1 == ~pended~0); {64287#(= 0 main_~status~6)} is VALID [2018-11-18 23:31:00,851 INFO L273 TraceCheckUtils]: 48: Hoare triple {64287#(= 0 main_~status~6)} assume ~s~0 == ~DC~0; {64287#(= 0 main_~status~6)} is VALID [2018-11-18 23:31:00,852 INFO L273 TraceCheckUtils]: 49: Hoare triple {64287#(= 0 main_~status~6)} assume 259 == ~status~6; {64281#false} is VALID [2018-11-18 23:31:00,852 INFO L256 TraceCheckUtils]: 50: Hoare triple {64281#false} call errorFn(); {64281#false} is VALID [2018-11-18 23:31:00,852 INFO L273 TraceCheckUtils]: 51: Hoare triple {64281#false} assume !false; {64281#false} is VALID [2018-11-18 23:31:00,854 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:31:00,854 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:31:00,854 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-18 23:31:00,854 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 52 [2018-11-18 23:31:00,854 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:31:00,854 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2018-11-18 23:31:00,906 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 52 edges. 52 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:31:00,906 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-18 23:31:00,906 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 23:31:00,907 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-18 23:31:00,907 INFO L87 Difference]: Start difference. First operand 575 states and 846 transitions. Second operand 8 states. [2018-11-18 23:31:06,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:06,555 INFO L93 Difference]: Finished difference Result 598 states and 870 transitions. [2018-11-18 23:31:06,556 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-18 23:31:06,556 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 52 [2018-11-18 23:31:06,556 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:31:06,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-18 23:31:06,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 301 transitions. [2018-11-18 23:31:06,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-18 23:31:06,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 301 transitions. [2018-11-18 23:31:06,560 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 301 transitions. [2018-11-18 23:31:06,867 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 301 edges. 301 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:31:06,889 INFO L225 Difference]: With dead ends: 598 [2018-11-18 23:31:06,889 INFO L226 Difference]: Without dead ends: 574 [2018-11-18 23:31:06,890 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2018-11-18 23:31:06,890 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 574 states. [2018-11-18 23:31:09,414 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 574 to 574. [2018-11-18 23:31:09,415 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:31:09,415 INFO L82 GeneralOperation]: Start isEquivalent. First operand 574 states. Second operand 574 states. [2018-11-18 23:31:09,415 INFO L74 IsIncluded]: Start isIncluded. First operand 574 states. Second operand 574 states. [2018-11-18 23:31:09,415 INFO L87 Difference]: Start difference. First operand 574 states. Second operand 574 states. [2018-11-18 23:31:09,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:09,437 INFO L93 Difference]: Finished difference Result 574 states and 844 transitions. [2018-11-18 23:31:09,437 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 844 transitions. [2018-11-18 23:31:09,438 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:31:09,438 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:31:09,439 INFO L74 IsIncluded]: Start isIncluded. First operand 574 states. Second operand 574 states. [2018-11-18 23:31:09,439 INFO L87 Difference]: Start difference. First operand 574 states. Second operand 574 states. [2018-11-18 23:31:09,458 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:09,458 INFO L93 Difference]: Finished difference Result 574 states and 844 transitions. [2018-11-18 23:31:09,458 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 844 transitions. [2018-11-18 23:31:09,459 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:31:09,459 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:31:09,459 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:31:09,459 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:31:09,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-11-18 23:31:09,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 844 transitions. [2018-11-18 23:31:09,477 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 844 transitions. Word has length 52 [2018-11-18 23:31:09,478 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:31:09,478 INFO L480 AbstractCegarLoop]: Abstraction has 574 states and 844 transitions. [2018-11-18 23:31:09,478 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-18 23:31:09,478 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 844 transitions. [2018-11-18 23:31:09,478 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2018-11-18 23:31:09,478 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:31:09,478 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:31:09,478 INFO L423 AbstractCegarLoop]: === Iteration 24 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:31:09,479 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:31:09,479 INFO L82 PathProgramCache]: Analyzing trace with hash -794377348, now seen corresponding path program 1 times [2018-11-18 23:31:09,479 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:31:09,479 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:31:09,479 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:31:09,480 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:31:09,480 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:31:09,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:31:09,907 INFO L256 TraceCheckUtils]: 0: Hoare triple {67013#true} call ULTIMATE.init(); {67013#true} is VALID [2018-11-18 23:31:09,908 INFO L273 TraceCheckUtils]: 1: Hoare triple {67013#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {67013#true} is VALID [2018-11-18 23:31:09,908 INFO L273 TraceCheckUtils]: 2: Hoare triple {67013#true} assume true; {67013#true} is VALID [2018-11-18 23:31:09,908 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {67013#true} {67013#true} #813#return; {67013#true} is VALID [2018-11-18 23:31:09,908 INFO L256 TraceCheckUtils]: 4: Hoare triple {67013#true} call #t~ret127 := main(); {67013#true} is VALID [2018-11-18 23:31:09,909 INFO L273 TraceCheckUtils]: 5: Hoare triple {67013#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {67013#true} is VALID [2018-11-18 23:31:09,909 INFO L256 TraceCheckUtils]: 6: Hoare triple {67013#true} call _BLAST_init(); {67013#true} is VALID [2018-11-18 23:31:09,910 INFO L273 TraceCheckUtils]: 7: Hoare triple {67013#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:31:09,910 INFO L273 TraceCheckUtils]: 8: Hoare triple {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} assume true; {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:31:09,910 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} {67013#true} #697#return; {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:31:09,911 INFO L273 TraceCheckUtils]: 10: Hoare triple {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:31:09,911 INFO L273 TraceCheckUtils]: 11: Hoare triple {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:31:09,911 INFO L256 TraceCheckUtils]: 12: Hoare triple {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} call stub_driver_init(); {67013#true} is VALID [2018-11-18 23:31:09,911 INFO L273 TraceCheckUtils]: 13: Hoare triple {67013#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {67013#true} is VALID [2018-11-18 23:31:09,911 INFO L273 TraceCheckUtils]: 14: Hoare triple {67013#true} assume true; {67013#true} is VALID [2018-11-18 23:31:09,916 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {67013#true} {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} #699#return; {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:31:09,916 INFO L273 TraceCheckUtils]: 16: Hoare triple {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:31:09,916 INFO L273 TraceCheckUtils]: 17: Hoare triple {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:31:09,917 INFO L273 TraceCheckUtils]: 18: Hoare triple {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:31:09,917 INFO L273 TraceCheckUtils]: 19: Hoare triple {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet106 && #t~nondet106 <= 2147483647;~tmp_ndt_4~0 := #t~nondet106;havoc #t~nondet106; {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:31:09,917 INFO L273 TraceCheckUtils]: 20: Hoare triple {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} assume 4 == ~tmp_ndt_4~0; {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} is VALID [2018-11-18 23:31:09,917 INFO L256 TraceCheckUtils]: 21: Hoare triple {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} call #t~ret111 := DiskPerfDispatchPower(~devobj~0, ~pirp~0); {67013#true} is VALID [2018-11-18 23:31:09,918 INFO L273 TraceCheckUtils]: 22: Hoare triple {67013#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet21;havoc #t~nondet21;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~DeviceObject__DeviceExtension~3 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~deviceExtension__TargetDeviceObject~2 := #t~nondet23;havoc #t~nondet23;havoc ~deviceExtension~3;havoc ~tmp~2; {67013#true} is VALID [2018-11-18 23:31:09,918 INFO L273 TraceCheckUtils]: 23: Hoare triple {67013#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {67013#true} is VALID [2018-11-18 23:31:09,918 INFO L273 TraceCheckUtils]: 24: Hoare triple {67013#true} #t~post24 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post24;havoc #t~post24;#t~post25 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post25;havoc #t~post25;~deviceExtension~3 := ~DeviceObject__DeviceExtension~3; {67013#true} is VALID [2018-11-18 23:31:09,918 INFO L256 TraceCheckUtils]: 25: Hoare triple {67013#true} call #t~ret26 := PoCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); {67013#true} is VALID [2018-11-18 23:31:09,918 INFO L273 TraceCheckUtils]: 26: Hoare triple {67013#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~lcontext~1 := #t~nondet122;havoc #t~nondet122;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~0; {67013#true} is VALID [2018-11-18 23:31:09,918 INFO L273 TraceCheckUtils]: 27: Hoare triple {67013#true} assume !(0 != ~compRegistered~0); {67013#true} is VALID [2018-11-18 23:31:09,918 INFO L273 TraceCheckUtils]: 28: Hoare triple {67013#true} havoc ~tmp_ndt_11~0;assume -2147483648 <= #t~nondet125 && #t~nondet125 <= 2147483647;~tmp_ndt_11~0 := #t~nondet125;havoc #t~nondet125; {67013#true} is VALID [2018-11-18 23:31:09,918 INFO L273 TraceCheckUtils]: 29: Hoare triple {67013#true} assume !(0 == ~tmp_ndt_11~0);havoc ~tmp_ndt_12~0;assume -2147483648 <= #t~nondet126 && #t~nondet126 <= 2147483647;~tmp_ndt_12~0 := #t~nondet126;havoc #t~nondet126; {67013#true} is VALID [2018-11-18 23:31:09,919 INFO L273 TraceCheckUtils]: 30: Hoare triple {67013#true} assume 1 == ~tmp_ndt_12~0; {67013#true} is VALID [2018-11-18 23:31:09,919 INFO L273 TraceCheckUtils]: 31: Hoare triple {67013#true} ~returnVal~0 := -1073741823; {67013#true} is VALID [2018-11-18 23:31:09,919 INFO L273 TraceCheckUtils]: 32: Hoare triple {67013#true} assume !(~s~0 == ~NP~0); {67013#true} is VALID [2018-11-18 23:31:09,919 INFO L273 TraceCheckUtils]: 33: Hoare triple {67013#true} assume !(~s~0 == ~MPR1~0); {67013#true} is VALID [2018-11-18 23:31:09,919 INFO L273 TraceCheckUtils]: 34: Hoare triple {67013#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {67016#(<= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:31:09,920 INFO L273 TraceCheckUtils]: 35: Hoare triple {67016#(<= ~SKIP2~0 ~s~0)} #res := ~returnVal~0; {67016#(<= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:31:09,920 INFO L273 TraceCheckUtils]: 36: Hoare triple {67016#(<= ~SKIP2~0 ~s~0)} assume true; {67016#(<= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:31:09,921 INFO L268 TraceCheckUtils]: 37: Hoare quadruple {67016#(<= ~SKIP2~0 ~s~0)} {67013#true} #733#return; {67016#(<= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:31:09,921 INFO L273 TraceCheckUtils]: 38: Hoare triple {67016#(<= ~SKIP2~0 ~s~0)} assume -2147483648 <= #t~ret26 && #t~ret26 <= 2147483647;~tmp~2 := #t~ret26;havoc #t~ret26;#res := ~tmp~2; {67016#(<= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:31:09,921 INFO L273 TraceCheckUtils]: 39: Hoare triple {67016#(<= ~SKIP2~0 ~s~0)} assume true; {67016#(<= ~SKIP2~0 ~s~0)} is VALID [2018-11-18 23:31:09,922 INFO L268 TraceCheckUtils]: 40: Hoare quadruple {67016#(<= ~SKIP2~0 ~s~0)} {67015#(<= (+ ~DC~0 2) ~SKIP2~0)} #707#return; {67017#(<= (+ ~DC~0 2) ~s~0)} is VALID [2018-11-18 23:31:09,922 INFO L273 TraceCheckUtils]: 41: Hoare triple {67017#(<= (+ ~DC~0 2) ~s~0)} assume -2147483648 <= #t~ret111 && #t~ret111 <= 2147483647;~status~6 := #t~ret111;havoc #t~ret111; {67017#(<= (+ ~DC~0 2) ~s~0)} is VALID [2018-11-18 23:31:09,923 INFO L273 TraceCheckUtils]: 42: Hoare triple {67017#(<= (+ ~DC~0 2) ~s~0)} assume !(0 != ~we_should_unload~0); {67017#(<= (+ ~DC~0 2) ~s~0)} is VALID [2018-11-18 23:31:09,923 INFO L273 TraceCheckUtils]: 43: Hoare triple {67017#(<= (+ ~DC~0 2) ~s~0)} assume !(1 == ~pended~0); {67017#(<= (+ ~DC~0 2) ~s~0)} is VALID [2018-11-18 23:31:09,924 INFO L273 TraceCheckUtils]: 44: Hoare triple {67017#(<= (+ ~DC~0 2) ~s~0)} assume !(1 == ~pended~0); {67017#(<= (+ ~DC~0 2) ~s~0)} is VALID [2018-11-18 23:31:09,924 INFO L273 TraceCheckUtils]: 45: Hoare triple {67017#(<= (+ ~DC~0 2) ~s~0)} assume ~s~0 != ~UNLOADED~0; {67017#(<= (+ ~DC~0 2) ~s~0)} is VALID [2018-11-18 23:31:09,925 INFO L273 TraceCheckUtils]: 46: Hoare triple {67017#(<= (+ ~DC~0 2) ~s~0)} assume -1 != ~status~6; {67017#(<= (+ ~DC~0 2) ~s~0)} is VALID [2018-11-18 23:31:09,925 INFO L273 TraceCheckUtils]: 47: Hoare triple {67017#(<= (+ ~DC~0 2) ~s~0)} assume !(~s~0 != ~SKIP2~0); {67017#(<= (+ ~DC~0 2) ~s~0)} is VALID [2018-11-18 23:31:09,926 INFO L273 TraceCheckUtils]: 48: Hoare triple {67017#(<= (+ ~DC~0 2) ~s~0)} assume !(1 == ~pended~0); {67017#(<= (+ ~DC~0 2) ~s~0)} is VALID [2018-11-18 23:31:09,926 INFO L273 TraceCheckUtils]: 49: Hoare triple {67017#(<= (+ ~DC~0 2) ~s~0)} assume ~s~0 == ~DC~0; {67014#false} is VALID [2018-11-18 23:31:09,927 INFO L273 TraceCheckUtils]: 50: Hoare triple {67014#false} assume 259 == ~status~6; {67014#false} is VALID [2018-11-18 23:31:09,927 INFO L256 TraceCheckUtils]: 51: Hoare triple {67014#false} call errorFn(); {67014#false} is VALID [2018-11-18 23:31:09,927 INFO L273 TraceCheckUtils]: 52: Hoare triple {67014#false} assume !false; {67014#false} is VALID [2018-11-18 23:31:09,930 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:31:09,931 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:31:09,931 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 23:31:09,931 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 53 [2018-11-18 23:31:09,932 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:31:09,932 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2018-11-18 23:31:09,991 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:31:09,991 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-18 23:31:09,991 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 23:31:09,991 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:31:09,992 INFO L87 Difference]: Start difference. First operand 574 states and 844 transitions. Second operand 5 states. [2018-11-18 23:31:16,428 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:16,428 INFO L93 Difference]: Finished difference Result 660 states and 989 transitions. [2018-11-18 23:31:16,428 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 23:31:16,428 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 53 [2018-11-18 23:31:16,428 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:31:16,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 23:31:16,432 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 482 transitions. [2018-11-18 23:31:16,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 23:31:16,436 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 482 transitions. [2018-11-18 23:31:16,436 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 482 transitions. [2018-11-18 23:31:17,064 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 482 edges. 482 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:31:17,089 INFO L225 Difference]: With dead ends: 660 [2018-11-18 23:31:17,089 INFO L226 Difference]: Without dead ends: 624 [2018-11-18 23:31:17,089 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-11-18 23:31:17,090 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 624 states. [2018-11-18 23:31:21,309 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 624 to 542. [2018-11-18 23:31:21,309 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:31:21,309 INFO L82 GeneralOperation]: Start isEquivalent. First operand 624 states. Second operand 542 states. [2018-11-18 23:31:21,309 INFO L74 IsIncluded]: Start isIncluded. First operand 624 states. Second operand 542 states. [2018-11-18 23:31:21,309 INFO L87 Difference]: Start difference. First operand 624 states. Second operand 542 states. [2018-11-18 23:31:21,334 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:21,335 INFO L93 Difference]: Finished difference Result 624 states and 949 transitions. [2018-11-18 23:31:21,335 INFO L276 IsEmpty]: Start isEmpty. Operand 624 states and 949 transitions. [2018-11-18 23:31:21,336 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:31:21,337 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:31:21,337 INFO L74 IsIncluded]: Start isIncluded. First operand 542 states. Second operand 624 states. [2018-11-18 23:31:21,337 INFO L87 Difference]: Start difference. First operand 542 states. Second operand 624 states. [2018-11-18 23:31:21,360 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:21,360 INFO L93 Difference]: Finished difference Result 624 states and 949 transitions. [2018-11-18 23:31:21,360 INFO L276 IsEmpty]: Start isEmpty. Operand 624 states and 949 transitions. [2018-11-18 23:31:21,361 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:31:21,361 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:31:21,361 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:31:21,361 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:31:21,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 542 states. [2018-11-18 23:31:21,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 542 states to 542 states and 807 transitions. [2018-11-18 23:31:21,387 INFO L78 Accepts]: Start accepts. Automaton has 542 states and 807 transitions. Word has length 53 [2018-11-18 23:31:21,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:31:21,388 INFO L480 AbstractCegarLoop]: Abstraction has 542 states and 807 transitions. [2018-11-18 23:31:21,388 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-18 23:31:21,388 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 807 transitions. [2018-11-18 23:31:21,388 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-18 23:31:21,389 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:31:21,389 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:31:21,389 INFO L423 AbstractCegarLoop]: === Iteration 25 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:31:21,389 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:31:21,389 INFO L82 PathProgramCache]: Analyzing trace with hash -2111623723, now seen corresponding path program 1 times [2018-11-18 23:31:21,389 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:31:21,389 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:31:21,390 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:31:21,390 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:31:21,390 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:31:21,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:31:21,657 INFO L256 TraceCheckUtils]: 0: Hoare triple {69885#true} call ULTIMATE.init(); {69885#true} is VALID [2018-11-18 23:31:21,657 INFO L273 TraceCheckUtils]: 1: Hoare triple {69885#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {69885#true} is VALID [2018-11-18 23:31:21,657 INFO L273 TraceCheckUtils]: 2: Hoare triple {69885#true} assume true; {69885#true} is VALID [2018-11-18 23:31:21,657 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {69885#true} {69885#true} #813#return; {69885#true} is VALID [2018-11-18 23:31:21,658 INFO L256 TraceCheckUtils]: 4: Hoare triple {69885#true} call #t~ret127 := main(); {69885#true} is VALID [2018-11-18 23:31:21,658 INFO L273 TraceCheckUtils]: 5: Hoare triple {69885#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {69885#true} is VALID [2018-11-18 23:31:21,658 INFO L256 TraceCheckUtils]: 6: Hoare triple {69885#true} call _BLAST_init(); {69885#true} is VALID [2018-11-18 23:31:21,658 INFO L273 TraceCheckUtils]: 7: Hoare triple {69885#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {69885#true} is VALID [2018-11-18 23:31:21,658 INFO L273 TraceCheckUtils]: 8: Hoare triple {69885#true} assume true; {69885#true} is VALID [2018-11-18 23:31:21,658 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {69885#true} {69885#true} #697#return; {69885#true} is VALID [2018-11-18 23:31:21,659 INFO L273 TraceCheckUtils]: 10: Hoare triple {69885#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {69885#true} is VALID [2018-11-18 23:31:21,659 INFO L273 TraceCheckUtils]: 11: Hoare triple {69885#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {69885#true} is VALID [2018-11-18 23:31:21,659 INFO L256 TraceCheckUtils]: 12: Hoare triple {69885#true} call stub_driver_init(); {69885#true} is VALID [2018-11-18 23:31:21,659 INFO L273 TraceCheckUtils]: 13: Hoare triple {69885#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {69885#true} is VALID [2018-11-18 23:31:21,659 INFO L273 TraceCheckUtils]: 14: Hoare triple {69885#true} assume true; {69885#true} is VALID [2018-11-18 23:31:21,659 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {69885#true} {69885#true} #699#return; {69885#true} is VALID [2018-11-18 23:31:21,660 INFO L273 TraceCheckUtils]: 16: Hoare triple {69885#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {69885#true} is VALID [2018-11-18 23:31:21,660 INFO L273 TraceCheckUtils]: 17: Hoare triple {69885#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {69885#true} is VALID [2018-11-18 23:31:21,660 INFO L273 TraceCheckUtils]: 18: Hoare triple {69885#true} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {69885#true} is VALID [2018-11-18 23:31:21,660 INFO L273 TraceCheckUtils]: 19: Hoare triple {69885#true} assume 3 == ~tmp_ndt_3~0; {69885#true} is VALID [2018-11-18 23:31:21,660 INFO L256 TraceCheckUtils]: 20: Hoare triple {69885#true} call #t~ret110 := DiskPerfDispatchPnp(~devobj~0, ~pirp~0); {69885#true} is VALID [2018-11-18 23:31:21,660 INFO L273 TraceCheckUtils]: 21: Hoare triple {69885#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet0;havoc #t~nondet0;assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647;~irpSp__MinorFunction~0 := #t~nondet1;havoc #t~nondet1;havoc ~irpSp~0;havoc ~status~0;havoc ~tmp~0;~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {69885#true} is VALID [2018-11-18 23:31:21,661 INFO L273 TraceCheckUtils]: 22: Hoare triple {69885#true} assume 0 == ~irpSp__MinorFunction~0; {69885#true} is VALID [2018-11-18 23:31:21,661 INFO L256 TraceCheckUtils]: 23: Hoare triple {69885#true} call #t~ret2 := DiskPerfStartDevice(~DeviceObject, ~Irp); {69885#true} is VALID [2018-11-18 23:31:21,661 INFO L273 TraceCheckUtils]: 24: Hoare triple {69885#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~deviceExtension__TargetDeviceObject~0 := #t~nondet7;havoc #t~nondet7;havoc ~Irp__IoStatus__Status~0;havoc ~deviceExtension~0;havoc ~status~1;~deviceExtension~0 := ~DeviceObject__DeviceExtension~0; {69885#true} is VALID [2018-11-18 23:31:21,661 INFO L256 TraceCheckUtils]: 25: Hoare triple {69885#true} call #t~ret8 := DiskPerfForwardIrpSynchronous(~DeviceObject, ~Irp); {69885#true} is VALID [2018-11-18 23:31:21,661 INFO L273 TraceCheckUtils]: 26: Hoare triple {69885#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~3 := #t~nondet27;havoc #t~nondet27;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~DeviceObject__DeviceExtension~4 := #t~nondet28;havoc #t~nondet28;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~deviceExtension__TargetDeviceObject~3 := #t~nondet29;havoc #t~nondet29;havoc ~deviceExtension~4;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~event~0 := #t~nondet30;havoc #t~nondet30;havoc ~status~3;havoc ~nextIrpSp__Control~0;havoc ~irpSp~1;havoc ~nextIrpSp~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~irpSp___0~0;havoc ~__cil_tmp15~0;~deviceExtension~4 := ~DeviceObject__DeviceExtension~4;~irpSp~1 := ~Irp__Tail__Overlay__CurrentStackLocation~3;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~3 - 1;~nextIrpSp__Control~0 := 0; {69885#true} is VALID [2018-11-18 23:31:21,661 INFO L273 TraceCheckUtils]: 27: Hoare triple {69885#true} assume !(~s~0 != ~NP~0); {69885#true} is VALID [2018-11-18 23:31:21,662 INFO L273 TraceCheckUtils]: 28: Hoare triple {69885#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~routine~0 := 0; {69885#true} is VALID [2018-11-18 23:31:21,662 INFO L273 TraceCheckUtils]: 29: Hoare triple {69885#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~3 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {69885#true} is VALID [2018-11-18 23:31:21,662 INFO L256 TraceCheckUtils]: 30: Hoare triple {69885#true} call #t~ret31 := IofCallDriver(~deviceExtension__TargetDeviceObject~3, ~Irp); {69885#true} is VALID [2018-11-18 23:31:21,662 INFO L273 TraceCheckUtils]: 31: Hoare triple {69885#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~lcontext~0 := #t~nondet115;havoc #t~nondet115;havoc ~__cil_tmp7~0; {69885#true} is VALID [2018-11-18 23:31:21,662 INFO L273 TraceCheckUtils]: 32: Hoare triple {69885#true} assume 0 != ~compRegistered~0; {69885#true} is VALID [2018-11-18 23:31:21,662 INFO L273 TraceCheckUtils]: 33: Hoare triple {69885#true} assume 0 == ~routine~0; {69885#true} is VALID [2018-11-18 23:31:21,663 INFO L256 TraceCheckUtils]: 34: Hoare triple {69885#true} call #t~ret116 := DiskPerfIrpCompletion(~DeviceObject, ~Irp, ~lcontext~0); {69885#true} is VALID [2018-11-18 23:31:21,663 INFO L273 TraceCheckUtils]: 35: Hoare triple {69885#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~Event~0;~Event~0 := ~Context; {69885#true} is VALID [2018-11-18 23:31:21,663 INFO L256 TraceCheckUtils]: 36: Hoare triple {69885#true} call #t~ret5 := KeSetEvent(~Event~0, 0, 0); {69885#true} is VALID [2018-11-18 23:31:21,663 INFO L273 TraceCheckUtils]: 37: Hoare triple {69885#true} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~l~0 := #t~nondet120;havoc #t~nondet120;~setEventCalled~0 := 1;#res := ~l~0; {69885#true} is VALID [2018-11-18 23:31:21,663 INFO L273 TraceCheckUtils]: 38: Hoare triple {69885#true} assume true; {69885#true} is VALID [2018-11-18 23:31:21,664 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {69885#true} {69885#true} #795#return; {69885#true} is VALID [2018-11-18 23:31:21,664 INFO L273 TraceCheckUtils]: 40: Hoare triple {69885#true} assume -2147483648 <= #t~ret5 && #t~ret5 <= 2147483647;havoc #t~ret5;#res := -1073741802; {69885#true} is VALID [2018-11-18 23:31:21,664 INFO L273 TraceCheckUtils]: 41: Hoare triple {69885#true} assume true; {69885#true} is VALID [2018-11-18 23:31:21,664 INFO L268 TraceCheckUtils]: 42: Hoare quadruple {69885#true} {69885#true} #797#return; {69885#true} is VALID [2018-11-18 23:31:21,664 INFO L273 TraceCheckUtils]: 43: Hoare triple {69885#true} assume -2147483648 <= #t~ret116 && #t~ret116 <= 2147483647;~compRetStatus~0 := #t~ret116;havoc #t~ret116; {69885#true} is VALID [2018-11-18 23:31:21,664 INFO L273 TraceCheckUtils]: 44: Hoare triple {69885#true} ~__cil_tmp7~0 := ~compRetStatus~0; {69885#true} is VALID [2018-11-18 23:31:21,665 INFO L273 TraceCheckUtils]: 45: Hoare triple {69885#true} assume 3221225494 == ~__cil_tmp7~0 % 4294967296; {69885#true} is VALID [2018-11-18 23:31:21,665 INFO L256 TraceCheckUtils]: 46: Hoare triple {69885#true} call stubMoreProcessingRequired(); {69885#true} is VALID [2018-11-18 23:31:21,677 INFO L273 TraceCheckUtils]: 47: Hoare triple {69885#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {69887#(= ~MPR1~0 ~s~0)} is VALID [2018-11-18 23:31:21,690 INFO L273 TraceCheckUtils]: 48: Hoare triple {69887#(= ~MPR1~0 ~s~0)} assume true; {69887#(= ~MPR1~0 ~s~0)} is VALID [2018-11-18 23:31:21,703 INFO L268 TraceCheckUtils]: 49: Hoare quadruple {69887#(= ~MPR1~0 ~s~0)} {69885#true} #801#return; {69887#(= ~MPR1~0 ~s~0)} is VALID [2018-11-18 23:31:21,718 INFO L273 TraceCheckUtils]: 50: Hoare triple {69887#(= ~MPR1~0 ~s~0)} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet118 && #t~nondet118 <= 2147483647;~tmp_ndt_8~0 := #t~nondet118;havoc #t~nondet118; {69887#(= ~MPR1~0 ~s~0)} is VALID [2018-11-18 23:31:21,722 INFO L273 TraceCheckUtils]: 51: Hoare triple {69887#(= ~MPR1~0 ~s~0)} assume 0 == ~tmp_ndt_8~0; {69887#(= ~MPR1~0 ~s~0)} is VALID [2018-11-18 23:31:21,723 INFO L273 TraceCheckUtils]: 52: Hoare triple {69887#(= ~MPR1~0 ~s~0)} ~returnVal2~0 := 0; {69887#(= ~MPR1~0 ~s~0)} is VALID [2018-11-18 23:31:21,726 INFO L273 TraceCheckUtils]: 53: Hoare triple {69887#(= ~MPR1~0 ~s~0)} assume !(~s~0 == ~NP~0); {69887#(= ~MPR1~0 ~s~0)} is VALID [2018-11-18 23:31:21,726 INFO L273 TraceCheckUtils]: 54: Hoare triple {69887#(= ~MPR1~0 ~s~0)} assume !(~s~0 == ~MPR1~0); {69886#false} is VALID [2018-11-18 23:31:21,726 INFO L273 TraceCheckUtils]: 55: Hoare triple {69886#false} assume !(~s~0 == ~SKIP1~0); {69886#false} is VALID [2018-11-18 23:31:21,726 INFO L256 TraceCheckUtils]: 56: Hoare triple {69886#false} call errorFn(); {69886#false} is VALID [2018-11-18 23:31:21,727 INFO L273 TraceCheckUtils]: 57: Hoare triple {69886#false} assume !false; {69886#false} is VALID [2018-11-18 23:31:21,785 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:31:21,786 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:31:21,786 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 23:31:21,786 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 58 [2018-11-18 23:31:21,786 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:31:21,787 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-18 23:31:21,874 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:31:21,874 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 23:31:21,874 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 23:31:21,874 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:31:21,875 INFO L87 Difference]: Start difference. First operand 542 states and 807 transitions. Second operand 3 states. [2018-11-18 23:31:24,065 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:24,065 INFO L93 Difference]: Finished difference Result 955 states and 1465 transitions. [2018-11-18 23:31:24,065 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 23:31:24,066 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 58 [2018-11-18 23:31:24,066 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:31:24,066 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:31:24,070 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 463 transitions. [2018-11-18 23:31:24,070 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:31:24,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 463 transitions. [2018-11-18 23:31:24,075 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 463 transitions. [2018-11-18 23:31:24,653 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 463 edges. 463 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:31:24,671 INFO L225 Difference]: With dead ends: 955 [2018-11-18 23:31:24,672 INFO L226 Difference]: Without dead ends: 527 [2018-11-18 23:31:24,674 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:31:24,674 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 527 states. [2018-11-18 23:31:27,342 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 527 to 527. [2018-11-18 23:31:27,342 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:31:27,342 INFO L82 GeneralOperation]: Start isEquivalent. First operand 527 states. Second operand 527 states. [2018-11-18 23:31:27,342 INFO L74 IsIncluded]: Start isIncluded. First operand 527 states. Second operand 527 states. [2018-11-18 23:31:27,342 INFO L87 Difference]: Start difference. First operand 527 states. Second operand 527 states. [2018-11-18 23:31:27,360 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:27,360 INFO L93 Difference]: Finished difference Result 527 states and 773 transitions. [2018-11-18 23:31:27,360 INFO L276 IsEmpty]: Start isEmpty. Operand 527 states and 773 transitions. [2018-11-18 23:31:27,361 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:31:27,361 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:31:27,362 INFO L74 IsIncluded]: Start isIncluded. First operand 527 states. Second operand 527 states. [2018-11-18 23:31:27,362 INFO L87 Difference]: Start difference. First operand 527 states. Second operand 527 states. [2018-11-18 23:31:27,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:27,378 INFO L93 Difference]: Finished difference Result 527 states and 773 transitions. [2018-11-18 23:31:27,379 INFO L276 IsEmpty]: Start isEmpty. Operand 527 states and 773 transitions. [2018-11-18 23:31:27,380 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:31:27,380 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:31:27,380 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:31:27,380 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:31:27,380 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 527 states. [2018-11-18 23:31:27,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 527 states to 527 states and 773 transitions. [2018-11-18 23:31:27,396 INFO L78 Accepts]: Start accepts. Automaton has 527 states and 773 transitions. Word has length 58 [2018-11-18 23:31:27,396 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:31:27,396 INFO L480 AbstractCegarLoop]: Abstraction has 527 states and 773 transitions. [2018-11-18 23:31:27,396 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 23:31:27,396 INFO L276 IsEmpty]: Start isEmpty. Operand 527 states and 773 transitions. [2018-11-18 23:31:27,396 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2018-11-18 23:31:27,396 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:31:27,397 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:31:27,397 INFO L423 AbstractCegarLoop]: === Iteration 26 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:31:27,397 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:31:27,397 INFO L82 PathProgramCache]: Analyzing trace with hash 2098360705, now seen corresponding path program 1 times [2018-11-18 23:31:27,397 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:31:27,397 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:31:27,398 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:31:27,398 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:31:27,398 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:31:27,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:31:27,971 INFO L256 TraceCheckUtils]: 0: Hoare triple {72921#true} call ULTIMATE.init(); {72921#true} is VALID [2018-11-18 23:31:27,972 INFO L273 TraceCheckUtils]: 1: Hoare triple {72921#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {72921#true} is VALID [2018-11-18 23:31:27,972 INFO L273 TraceCheckUtils]: 2: Hoare triple {72921#true} assume true; {72921#true} is VALID [2018-11-18 23:31:27,972 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {72921#true} {72921#true} #813#return; {72921#true} is VALID [2018-11-18 23:31:27,972 INFO L256 TraceCheckUtils]: 4: Hoare triple {72921#true} call #t~ret127 := main(); {72921#true} is VALID [2018-11-18 23:31:27,973 INFO L273 TraceCheckUtils]: 5: Hoare triple {72921#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {72921#true} is VALID [2018-11-18 23:31:27,973 INFO L256 TraceCheckUtils]: 6: Hoare triple {72921#true} call _BLAST_init(); {72921#true} is VALID [2018-11-18 23:31:27,973 INFO L273 TraceCheckUtils]: 7: Hoare triple {72921#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {72921#true} is VALID [2018-11-18 23:31:27,973 INFO L273 TraceCheckUtils]: 8: Hoare triple {72921#true} assume true; {72921#true} is VALID [2018-11-18 23:31:27,973 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {72921#true} {72921#true} #697#return; {72921#true} is VALID [2018-11-18 23:31:27,974 INFO L273 TraceCheckUtils]: 10: Hoare triple {72921#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {72921#true} is VALID [2018-11-18 23:31:27,974 INFO L273 TraceCheckUtils]: 11: Hoare triple {72921#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {72921#true} is VALID [2018-11-18 23:31:27,974 INFO L256 TraceCheckUtils]: 12: Hoare triple {72921#true} call stub_driver_init(); {72921#true} is VALID [2018-11-18 23:31:27,974 INFO L273 TraceCheckUtils]: 13: Hoare triple {72921#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {72921#true} is VALID [2018-11-18 23:31:27,975 INFO L273 TraceCheckUtils]: 14: Hoare triple {72921#true} assume true; {72921#true} is VALID [2018-11-18 23:31:27,975 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {72921#true} {72921#true} #699#return; {72921#true} is VALID [2018-11-18 23:31:27,975 INFO L273 TraceCheckUtils]: 16: Hoare triple {72921#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {72921#true} is VALID [2018-11-18 23:31:27,975 INFO L273 TraceCheckUtils]: 17: Hoare triple {72921#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {72921#true} is VALID [2018-11-18 23:31:27,975 INFO L273 TraceCheckUtils]: 18: Hoare triple {72921#true} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {72921#true} is VALID [2018-11-18 23:31:27,976 INFO L273 TraceCheckUtils]: 19: Hoare triple {72921#true} assume 3 == ~tmp_ndt_3~0; {72921#true} is VALID [2018-11-18 23:31:27,976 INFO L256 TraceCheckUtils]: 20: Hoare triple {72921#true} call #t~ret110 := DiskPerfDispatchPnp(~devobj~0, ~pirp~0); {72921#true} is VALID [2018-11-18 23:31:27,976 INFO L273 TraceCheckUtils]: 21: Hoare triple {72921#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet0;havoc #t~nondet0;assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647;~irpSp__MinorFunction~0 := #t~nondet1;havoc #t~nondet1;havoc ~irpSp~0;havoc ~status~0;havoc ~tmp~0;~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {72921#true} is VALID [2018-11-18 23:31:27,976 INFO L273 TraceCheckUtils]: 22: Hoare triple {72921#true} assume !(0 == ~irpSp__MinorFunction~0); {72921#true} is VALID [2018-11-18 23:31:27,976 INFO L273 TraceCheckUtils]: 23: Hoare triple {72921#true} assume !(2 == ~irpSp__MinorFunction~0); {72921#true} is VALID [2018-11-18 23:31:27,977 INFO L256 TraceCheckUtils]: 24: Hoare triple {72921#true} call #t~ret4 := DiskPerfSendToNextDriver(~DeviceObject, ~Irp); {72921#true} is VALID [2018-11-18 23:31:27,977 INFO L273 TraceCheckUtils]: 25: Hoare triple {72921#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet13;havoc #t~nondet13;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~DeviceObject__DeviceExtension~2 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~deviceExtension__TargetDeviceObject~1 := #t~nondet16;havoc #t~nondet16;havoc ~deviceExtension~2;havoc ~tmp~1; {72921#true} is VALID [2018-11-18 23:31:27,977 INFO L273 TraceCheckUtils]: 26: Hoare triple {72921#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {72921#true} is VALID [2018-11-18 23:31:27,977 INFO L273 TraceCheckUtils]: 27: Hoare triple {72921#true} #t~post17 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post17;havoc #t~post17;#t~post18 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post18;havoc #t~post18;~deviceExtension~2 := ~DeviceObject__DeviceExtension~2; {72921#true} is VALID [2018-11-18 23:31:27,977 INFO L256 TraceCheckUtils]: 28: Hoare triple {72921#true} call #t~ret19 := IofCallDriver(~deviceExtension__TargetDeviceObject~1, ~Irp); {72921#true} is VALID [2018-11-18 23:31:27,978 INFO L273 TraceCheckUtils]: 29: Hoare triple {72921#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~lcontext~0 := #t~nondet115;havoc #t~nondet115;havoc ~__cil_tmp7~0; {72921#true} is VALID [2018-11-18 23:31:27,978 INFO L273 TraceCheckUtils]: 30: Hoare triple {72921#true} assume !(0 != ~compRegistered~0); {72921#true} is VALID [2018-11-18 23:31:27,978 INFO L273 TraceCheckUtils]: 31: Hoare triple {72921#true} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet118 && #t~nondet118 <= 2147483647;~tmp_ndt_8~0 := #t~nondet118;havoc #t~nondet118; {72921#true} is VALID [2018-11-18 23:31:27,978 INFO L273 TraceCheckUtils]: 32: Hoare triple {72921#true} assume 0 == ~tmp_ndt_8~0; {72921#true} is VALID [2018-11-18 23:31:27,978 INFO L273 TraceCheckUtils]: 33: Hoare triple {72921#true} ~returnVal2~0 := 0; {72921#true} is VALID [2018-11-18 23:31:27,979 INFO L273 TraceCheckUtils]: 34: Hoare triple {72921#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {72923#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2018-11-18 23:31:27,979 INFO L273 TraceCheckUtils]: 35: Hoare triple {72923#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {72924#(= ~lowerDriverReturn~0 |IofCallDriver_#res|)} is VALID [2018-11-18 23:31:27,980 INFO L273 TraceCheckUtils]: 36: Hoare triple {72924#(= ~lowerDriverReturn~0 |IofCallDriver_#res|)} assume true; {72924#(= ~lowerDriverReturn~0 |IofCallDriver_#res|)} is VALID [2018-11-18 23:31:27,980 INFO L268 TraceCheckUtils]: 37: Hoare quadruple {72924#(= ~lowerDriverReturn~0 |IofCallDriver_#res|)} {72921#true} #741#return; {72925#(= ~lowerDriverReturn~0 |DiskPerfSendToNextDriver_#t~ret19|)} is VALID [2018-11-18 23:31:27,981 INFO L273 TraceCheckUtils]: 38: Hoare triple {72925#(= ~lowerDriverReturn~0 |DiskPerfSendToNextDriver_#t~ret19|)} assume -2147483648 <= #t~ret19 && #t~ret19 <= 2147483647;~tmp~1 := #t~ret19;havoc #t~ret19;#res := ~tmp~1; {72926#(= ~lowerDriverReturn~0 |DiskPerfSendToNextDriver_#res|)} is VALID [2018-11-18 23:31:27,981 INFO L273 TraceCheckUtils]: 39: Hoare triple {72926#(= ~lowerDriverReturn~0 |DiskPerfSendToNextDriver_#res|)} assume true; {72926#(= ~lowerDriverReturn~0 |DiskPerfSendToNextDriver_#res|)} is VALID [2018-11-18 23:31:27,982 INFO L268 TraceCheckUtils]: 40: Hoare quadruple {72926#(= ~lowerDriverReturn~0 |DiskPerfSendToNextDriver_#res|)} {72921#true} #811#return; {72927#(= ~lowerDriverReturn~0 |DiskPerfDispatchPnp_#t~ret4|)} is VALID [2018-11-18 23:31:27,983 INFO L273 TraceCheckUtils]: 41: Hoare triple {72927#(= ~lowerDriverReturn~0 |DiskPerfDispatchPnp_#t~ret4|)} assume -2147483648 <= #t~ret4 && #t~ret4 <= 2147483647;~tmp~0 := #t~ret4;havoc #t~ret4;#res := ~tmp~0; {72928#(= ~lowerDriverReturn~0 |DiskPerfDispatchPnp_#res|)} is VALID [2018-11-18 23:31:27,983 INFO L273 TraceCheckUtils]: 42: Hoare triple {72928#(= ~lowerDriverReturn~0 |DiskPerfDispatchPnp_#res|)} assume true; {72928#(= ~lowerDriverReturn~0 |DiskPerfDispatchPnp_#res|)} is VALID [2018-11-18 23:31:27,984 INFO L268 TraceCheckUtils]: 43: Hoare quadruple {72928#(= ~lowerDriverReturn~0 |DiskPerfDispatchPnp_#res|)} {72921#true} #705#return; {72929#(= ~lowerDriverReturn~0 |main_#t~ret110|)} is VALID [2018-11-18 23:31:27,985 INFO L273 TraceCheckUtils]: 44: Hoare triple {72929#(= ~lowerDriverReturn~0 |main_#t~ret110|)} assume -2147483648 <= #t~ret110 && #t~ret110 <= 2147483647;~status~6 := #t~ret110;havoc #t~ret110; {72930#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:31:27,985 INFO L273 TraceCheckUtils]: 45: Hoare triple {72930#(= main_~status~6 ~lowerDriverReturn~0)} assume !(0 != ~we_should_unload~0); {72930#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:31:27,986 INFO L273 TraceCheckUtils]: 46: Hoare triple {72930#(= main_~status~6 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {72930#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:31:27,986 INFO L273 TraceCheckUtils]: 47: Hoare triple {72930#(= main_~status~6 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {72930#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:31:27,987 INFO L273 TraceCheckUtils]: 48: Hoare triple {72930#(= main_~status~6 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {72930#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:31:27,987 INFO L273 TraceCheckUtils]: 49: Hoare triple {72930#(= main_~status~6 ~lowerDriverReturn~0)} assume -1 != ~status~6; {72930#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:31:27,988 INFO L273 TraceCheckUtils]: 50: Hoare triple {72930#(= main_~status~6 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {72930#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:31:27,988 INFO L273 TraceCheckUtils]: 51: Hoare triple {72930#(= main_~status~6 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {72930#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:31:27,989 INFO L273 TraceCheckUtils]: 52: Hoare triple {72930#(= main_~status~6 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {72930#(= main_~status~6 ~lowerDriverReturn~0)} is VALID [2018-11-18 23:31:27,989 INFO L273 TraceCheckUtils]: 53: Hoare triple {72930#(= main_~status~6 ~lowerDriverReturn~0)} assume ~status~6 != ~lowerDriverReturn~0; {72922#false} is VALID [2018-11-18 23:31:27,989 INFO L256 TraceCheckUtils]: 54: Hoare triple {72922#false} call errorFn(); {72922#false} is VALID [2018-11-18 23:31:27,990 INFO L273 TraceCheckUtils]: 55: Hoare triple {72922#false} assume !false; {72922#false} is VALID [2018-11-18 23:31:27,992 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:31:27,993 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:31:27,993 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2018-11-18 23:31:27,993 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 56 [2018-11-18 23:31:27,993 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:31:27,994 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states. [2018-11-18 23:31:28,053 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:31:28,054 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-11-18 23:31:28,054 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-18 23:31:28,054 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2018-11-18 23:31:28,055 INFO L87 Difference]: Start difference. First operand 527 states and 773 transitions. Second operand 10 states. [2018-11-18 23:31:33,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:33,997 INFO L93 Difference]: Finished difference Result 529 states and 774 transitions. [2018-11-18 23:31:33,997 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-11-18 23:31:33,997 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 56 [2018-11-18 23:31:33,998 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:31:33,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2018-11-18 23:31:34,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 264 transitions. [2018-11-18 23:31:34,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2018-11-18 23:31:34,003 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 264 transitions. [2018-11-18 23:31:34,004 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 264 transitions. [2018-11-18 23:31:34,378 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 264 edges. 264 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:31:34,392 INFO L225 Difference]: With dead ends: 529 [2018-11-18 23:31:34,393 INFO L226 Difference]: Without dead ends: 466 [2018-11-18 23:31:34,393 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2018-11-18 23:31:34,394 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 466 states. [2018-11-18 23:31:35,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 466 to 466. [2018-11-18 23:31:35,900 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:31:35,900 INFO L82 GeneralOperation]: Start isEquivalent. First operand 466 states. Second operand 466 states. [2018-11-18 23:31:35,900 INFO L74 IsIncluded]: Start isIncluded. First operand 466 states. Second operand 466 states. [2018-11-18 23:31:35,900 INFO L87 Difference]: Start difference. First operand 466 states. Second operand 466 states. [2018-11-18 23:31:35,915 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:35,915 INFO L93 Difference]: Finished difference Result 466 states and 705 transitions. [2018-11-18 23:31:35,915 INFO L276 IsEmpty]: Start isEmpty. Operand 466 states and 705 transitions. [2018-11-18 23:31:35,916 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:31:35,916 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:31:35,916 INFO L74 IsIncluded]: Start isIncluded. First operand 466 states. Second operand 466 states. [2018-11-18 23:31:35,917 INFO L87 Difference]: Start difference. First operand 466 states. Second operand 466 states. [2018-11-18 23:31:35,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:35,929 INFO L93 Difference]: Finished difference Result 466 states and 705 transitions. [2018-11-18 23:31:35,929 INFO L276 IsEmpty]: Start isEmpty. Operand 466 states and 705 transitions. [2018-11-18 23:31:35,930 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:31:35,930 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:31:35,930 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:31:35,930 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:31:35,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 466 states. [2018-11-18 23:31:35,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 466 states to 466 states and 705 transitions. [2018-11-18 23:31:35,944 INFO L78 Accepts]: Start accepts. Automaton has 466 states and 705 transitions. Word has length 56 [2018-11-18 23:31:35,944 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:31:35,944 INFO L480 AbstractCegarLoop]: Abstraction has 466 states and 705 transitions. [2018-11-18 23:31:35,944 INFO L481 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-11-18 23:31:35,944 INFO L276 IsEmpty]: Start isEmpty. Operand 466 states and 705 transitions. [2018-11-18 23:31:35,944 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2018-11-18 23:31:35,945 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:31:35,945 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:31:35,945 INFO L423 AbstractCegarLoop]: === Iteration 27 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:31:35,945 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:31:35,945 INFO L82 PathProgramCache]: Analyzing trace with hash -1342499619, now seen corresponding path program 1 times [2018-11-18 23:31:35,945 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:31:35,945 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:31:35,946 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:31:35,946 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:31:35,946 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:31:35,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:31:36,280 INFO L256 TraceCheckUtils]: 0: Hoare triple {75199#true} call ULTIMATE.init(); {75199#true} is VALID [2018-11-18 23:31:36,280 INFO L273 TraceCheckUtils]: 1: Hoare triple {75199#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {75199#true} is VALID [2018-11-18 23:31:36,281 INFO L273 TraceCheckUtils]: 2: Hoare triple {75199#true} assume true; {75199#true} is VALID [2018-11-18 23:31:36,281 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {75199#true} {75199#true} #813#return; {75199#true} is VALID [2018-11-18 23:31:36,281 INFO L256 TraceCheckUtils]: 4: Hoare triple {75199#true} call #t~ret127 := main(); {75199#true} is VALID [2018-11-18 23:31:36,281 INFO L273 TraceCheckUtils]: 5: Hoare triple {75199#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {75199#true} is VALID [2018-11-18 23:31:36,282 INFO L256 TraceCheckUtils]: 6: Hoare triple {75199#true} call _BLAST_init(); {75199#true} is VALID [2018-11-18 23:31:36,282 INFO L273 TraceCheckUtils]: 7: Hoare triple {75199#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {75199#true} is VALID [2018-11-18 23:31:36,282 INFO L273 TraceCheckUtils]: 8: Hoare triple {75199#true} assume true; {75199#true} is VALID [2018-11-18 23:31:36,282 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {75199#true} {75199#true} #697#return; {75199#true} is VALID [2018-11-18 23:31:36,282 INFO L273 TraceCheckUtils]: 10: Hoare triple {75199#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {75199#true} is VALID [2018-11-18 23:31:36,283 INFO L273 TraceCheckUtils]: 11: Hoare triple {75199#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {75199#true} is VALID [2018-11-18 23:31:36,283 INFO L256 TraceCheckUtils]: 12: Hoare triple {75199#true} call stub_driver_init(); {75199#true} is VALID [2018-11-18 23:31:36,283 INFO L273 TraceCheckUtils]: 13: Hoare triple {75199#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {75199#true} is VALID [2018-11-18 23:31:36,283 INFO L273 TraceCheckUtils]: 14: Hoare triple {75199#true} assume true; {75199#true} is VALID [2018-11-18 23:31:36,283 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {75199#true} {75199#true} #699#return; {75199#true} is VALID [2018-11-18 23:31:36,284 INFO L273 TraceCheckUtils]: 16: Hoare triple {75199#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {75199#true} is VALID [2018-11-18 23:31:36,284 INFO L273 TraceCheckUtils]: 17: Hoare triple {75199#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {75199#true} is VALID [2018-11-18 23:31:36,284 INFO L273 TraceCheckUtils]: 18: Hoare triple {75199#true} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {75199#true} is VALID [2018-11-18 23:31:36,284 INFO L273 TraceCheckUtils]: 19: Hoare triple {75199#true} assume 3 == ~tmp_ndt_3~0; {75199#true} is VALID [2018-11-18 23:31:36,284 INFO L256 TraceCheckUtils]: 20: Hoare triple {75199#true} call #t~ret110 := DiskPerfDispatchPnp(~devobj~0, ~pirp~0); {75199#true} is VALID [2018-11-18 23:31:36,284 INFO L273 TraceCheckUtils]: 21: Hoare triple {75199#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet0;havoc #t~nondet0;assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647;~irpSp__MinorFunction~0 := #t~nondet1;havoc #t~nondet1;havoc ~irpSp~0;havoc ~status~0;havoc ~tmp~0;~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {75199#true} is VALID [2018-11-18 23:31:36,284 INFO L273 TraceCheckUtils]: 22: Hoare triple {75199#true} assume !(0 == ~irpSp__MinorFunction~0); {75199#true} is VALID [2018-11-18 23:31:36,284 INFO L273 TraceCheckUtils]: 23: Hoare triple {75199#true} assume 2 == ~irpSp__MinorFunction~0; {75199#true} is VALID [2018-11-18 23:31:36,285 INFO L256 TraceCheckUtils]: 24: Hoare triple {75199#true} call #t~ret3 := DiskPerfRemoveDevice(~DeviceObject, ~Irp); {75199#true} is VALID [2018-11-18 23:31:36,285 INFO L273 TraceCheckUtils]: 25: Hoare triple {75199#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~DeviceObject__DeviceExtension~1 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~deviceExtension__WmilibContext~0 := #t~nondet11;havoc #t~nondet11;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~deviceExtension~1;havoc ~wmilibContext~0;~deviceExtension~1 := ~DeviceObject__DeviceExtension~1;~wmilibContext~0 := ~deviceExtension__WmilibContext~0; {75199#true} is VALID [2018-11-18 23:31:36,285 INFO L256 TraceCheckUtils]: 26: Hoare triple {75199#true} call #t~ret12 := DiskPerfForwardIrpSynchronous(~DeviceObject, ~Irp); {75199#true} is VALID [2018-11-18 23:31:36,285 INFO L273 TraceCheckUtils]: 27: Hoare triple {75199#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~3 := #t~nondet27;havoc #t~nondet27;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~DeviceObject__DeviceExtension~4 := #t~nondet28;havoc #t~nondet28;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~deviceExtension__TargetDeviceObject~3 := #t~nondet29;havoc #t~nondet29;havoc ~deviceExtension~4;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~event~0 := #t~nondet30;havoc #t~nondet30;havoc ~status~3;havoc ~nextIrpSp__Control~0;havoc ~irpSp~1;havoc ~nextIrpSp~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~irpSp___0~0;havoc ~__cil_tmp15~0;~deviceExtension~4 := ~DeviceObject__DeviceExtension~4;~irpSp~1 := ~Irp__Tail__Overlay__CurrentStackLocation~3;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~3 - 1;~nextIrpSp__Control~0 := 0; {75199#true} is VALID [2018-11-18 23:31:36,285 INFO L273 TraceCheckUtils]: 28: Hoare triple {75199#true} assume !(~s~0 != ~NP~0); {75199#true} is VALID [2018-11-18 23:31:36,285 INFO L273 TraceCheckUtils]: 29: Hoare triple {75199#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~routine~0 := 0; {75199#true} is VALID [2018-11-18 23:31:36,285 INFO L273 TraceCheckUtils]: 30: Hoare triple {75199#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~3 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {75199#true} is VALID [2018-11-18 23:31:36,285 INFO L256 TraceCheckUtils]: 31: Hoare triple {75199#true} call #t~ret31 := IofCallDriver(~deviceExtension__TargetDeviceObject~3, ~Irp); {75199#true} is VALID [2018-11-18 23:31:36,285 INFO L273 TraceCheckUtils]: 32: Hoare triple {75199#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~lcontext~0 := #t~nondet115;havoc #t~nondet115;havoc ~__cil_tmp7~0; {75199#true} is VALID [2018-11-18 23:31:36,286 INFO L273 TraceCheckUtils]: 33: Hoare triple {75199#true} assume 0 != ~compRegistered~0; {75199#true} is VALID [2018-11-18 23:31:36,286 INFO L273 TraceCheckUtils]: 34: Hoare triple {75199#true} assume 0 == ~routine~0; {75199#true} is VALID [2018-11-18 23:31:36,286 INFO L256 TraceCheckUtils]: 35: Hoare triple {75199#true} call #t~ret116 := DiskPerfIrpCompletion(~DeviceObject, ~Irp, ~lcontext~0); {75199#true} is VALID [2018-11-18 23:31:36,286 INFO L273 TraceCheckUtils]: 36: Hoare triple {75199#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~Event~0;~Event~0 := ~Context; {75199#true} is VALID [2018-11-18 23:31:36,286 INFO L256 TraceCheckUtils]: 37: Hoare triple {75199#true} call #t~ret5 := KeSetEvent(~Event~0, 0, 0); {75199#true} is VALID [2018-11-18 23:31:36,286 INFO L273 TraceCheckUtils]: 38: Hoare triple {75199#true} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~l~0 := #t~nondet120;havoc #t~nondet120;~setEventCalled~0 := 1;#res := ~l~0; {75199#true} is VALID [2018-11-18 23:31:36,286 INFO L273 TraceCheckUtils]: 39: Hoare triple {75199#true} assume true; {75199#true} is VALID [2018-11-18 23:31:36,286 INFO L268 TraceCheckUtils]: 40: Hoare quadruple {75199#true} {75199#true} #795#return; {75199#true} is VALID [2018-11-18 23:31:36,287 INFO L273 TraceCheckUtils]: 41: Hoare triple {75199#true} assume -2147483648 <= #t~ret5 && #t~ret5 <= 2147483647;havoc #t~ret5;#res := -1073741802; {75199#true} is VALID [2018-11-18 23:31:36,287 INFO L273 TraceCheckUtils]: 42: Hoare triple {75199#true} assume true; {75199#true} is VALID [2018-11-18 23:31:36,287 INFO L268 TraceCheckUtils]: 43: Hoare quadruple {75199#true} {75199#true} #797#return; {75199#true} is VALID [2018-11-18 23:31:36,287 INFO L273 TraceCheckUtils]: 44: Hoare triple {75199#true} assume -2147483648 <= #t~ret116 && #t~ret116 <= 2147483647;~compRetStatus~0 := #t~ret116;havoc #t~ret116; {75199#true} is VALID [2018-11-18 23:31:36,287 INFO L273 TraceCheckUtils]: 45: Hoare triple {75199#true} ~__cil_tmp7~0 := ~compRetStatus~0; {75199#true} is VALID [2018-11-18 23:31:36,287 INFO L273 TraceCheckUtils]: 46: Hoare triple {75199#true} assume !(3221225494 == ~__cil_tmp7~0 % 4294967296); {75199#true} is VALID [2018-11-18 23:31:36,287 INFO L273 TraceCheckUtils]: 47: Hoare triple {75199#true} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet118 && #t~nondet118 <= 2147483647;~tmp_ndt_8~0 := #t~nondet118;havoc #t~nondet118; {75199#true} is VALID [2018-11-18 23:31:36,287 INFO L273 TraceCheckUtils]: 48: Hoare triple {75199#true} assume 0 == ~tmp_ndt_8~0; {75199#true} is VALID [2018-11-18 23:31:36,288 INFO L273 TraceCheckUtils]: 49: Hoare triple {75199#true} ~returnVal2~0 := 0; {75201#(= 0 IofCallDriver_~returnVal2~0)} is VALID [2018-11-18 23:31:36,288 INFO L273 TraceCheckUtils]: 50: Hoare triple {75201#(= 0 IofCallDriver_~returnVal2~0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {75201#(= 0 IofCallDriver_~returnVal2~0)} is VALID [2018-11-18 23:31:36,289 INFO L273 TraceCheckUtils]: 51: Hoare triple {75201#(= 0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {75202#(= 0 |IofCallDriver_#res|)} is VALID [2018-11-18 23:31:36,289 INFO L273 TraceCheckUtils]: 52: Hoare triple {75202#(= 0 |IofCallDriver_#res|)} assume true; {75202#(= 0 |IofCallDriver_#res|)} is VALID [2018-11-18 23:31:36,290 INFO L268 TraceCheckUtils]: 53: Hoare quadruple {75202#(= 0 |IofCallDriver_#res|)} {75199#true} #755#return; {75203#(= 0 |DiskPerfForwardIrpSynchronous_#t~ret31|)} is VALID [2018-11-18 23:31:36,290 INFO L273 TraceCheckUtils]: 54: Hoare triple {75203#(= 0 |DiskPerfForwardIrpSynchronous_#t~ret31|)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~3 := #t~ret31;havoc #t~ret31;~__cil_tmp15~0 := ~status~3; {75204#(= 0 DiskPerfForwardIrpSynchronous_~__cil_tmp15~0)} is VALID [2018-11-18 23:31:36,290 INFO L273 TraceCheckUtils]: 55: Hoare triple {75204#(= 0 DiskPerfForwardIrpSynchronous_~__cil_tmp15~0)} assume 259 == ~__cil_tmp15~0; {75200#false} is VALID [2018-11-18 23:31:36,290 INFO L256 TraceCheckUtils]: 56: Hoare triple {75200#false} call #t~ret32 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {75200#false} is VALID [2018-11-18 23:31:36,291 INFO L273 TraceCheckUtils]: 57: Hoare triple {75200#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {75200#false} is VALID [2018-11-18 23:31:36,291 INFO L273 TraceCheckUtils]: 58: Hoare triple {75200#false} assume !(~s~0 == ~MPR3~0); {75200#false} is VALID [2018-11-18 23:31:36,291 INFO L273 TraceCheckUtils]: 59: Hoare triple {75200#false} assume !(1 == ~customIrp~0); {75200#false} is VALID [2018-11-18 23:31:36,291 INFO L273 TraceCheckUtils]: 60: Hoare triple {75200#false} assume ~s~0 == ~MPR3~0; {75200#false} is VALID [2018-11-18 23:31:36,291 INFO L256 TraceCheckUtils]: 61: Hoare triple {75200#false} call errorFn(); {75200#false} is VALID [2018-11-18 23:31:36,291 INFO L273 TraceCheckUtils]: 62: Hoare triple {75200#false} assume !false; {75200#false} is VALID [2018-11-18 23:31:36,294 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:31:36,294 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:31:36,294 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 23:31:36,294 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 63 [2018-11-18 23:31:36,294 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:31:36,295 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2018-11-18 23:31:36,357 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 63 edges. 63 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:31:36,357 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-18 23:31:36,357 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-18 23:31:36,357 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-18 23:31:36,358 INFO L87 Difference]: Start difference. First operand 466 states and 705 transitions. Second operand 6 states. [2018-11-18 23:31:39,715 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:39,715 INFO L93 Difference]: Finished difference Result 918 states and 1435 transitions. [2018-11-18 23:31:39,715 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-18 23:31:39,715 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 63 [2018-11-18 23:31:39,715 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:31:39,715 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-18 23:31:39,718 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 447 transitions. [2018-11-18 23:31:39,719 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-18 23:31:39,721 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 447 transitions. [2018-11-18 23:31:39,722 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 447 transitions. [2018-11-18 23:31:40,190 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 447 edges. 447 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:31:40,208 INFO L225 Difference]: With dead ends: 918 [2018-11-18 23:31:40,208 INFO L226 Difference]: Without dead ends: 491 [2018-11-18 23:31:40,210 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-18 23:31:40,211 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 491 states. [2018-11-18 23:31:43,285 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 491 to 477. [2018-11-18 23:31:43,285 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:31:43,285 INFO L82 GeneralOperation]: Start isEquivalent. First operand 491 states. Second operand 477 states. [2018-11-18 23:31:43,285 INFO L74 IsIncluded]: Start isIncluded. First operand 491 states. Second operand 477 states. [2018-11-18 23:31:43,285 INFO L87 Difference]: Start difference. First operand 491 states. Second operand 477 states. [2018-11-18 23:31:43,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:43,304 INFO L93 Difference]: Finished difference Result 491 states and 773 transitions. [2018-11-18 23:31:43,304 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 773 transitions. [2018-11-18 23:31:43,305 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:31:43,305 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:31:43,305 INFO L74 IsIncluded]: Start isIncluded. First operand 477 states. Second operand 491 states. [2018-11-18 23:31:43,305 INFO L87 Difference]: Start difference. First operand 477 states. Second operand 491 states. [2018-11-18 23:31:43,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:43,323 INFO L93 Difference]: Finished difference Result 491 states and 773 transitions. [2018-11-18 23:31:43,323 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 773 transitions. [2018-11-18 23:31:43,324 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:31:43,324 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:31:43,324 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:31:43,325 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:31:43,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 477 states. [2018-11-18 23:31:43,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 477 states to 477 states and 744 transitions. [2018-11-18 23:31:43,341 INFO L78 Accepts]: Start accepts. Automaton has 477 states and 744 transitions. Word has length 63 [2018-11-18 23:31:43,341 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:31:43,341 INFO L480 AbstractCegarLoop]: Abstraction has 477 states and 744 transitions. [2018-11-18 23:31:43,341 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-18 23:31:43,341 INFO L276 IsEmpty]: Start isEmpty. Operand 477 states and 744 transitions. [2018-11-18 23:31:43,342 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-18 23:31:43,342 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:31:43,342 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:31:43,342 INFO L423 AbstractCegarLoop]: === Iteration 28 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:31:43,342 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:31:43,343 INFO L82 PathProgramCache]: Analyzing trace with hash -686261687, now seen corresponding path program 1 times [2018-11-18 23:31:43,343 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:31:43,343 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:31:43,343 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:31:43,343 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:31:43,344 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:31:43,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:31:43,591 INFO L256 TraceCheckUtils]: 0: Hoare triple {78045#true} call ULTIMATE.init(); {78045#true} is VALID [2018-11-18 23:31:43,592 INFO L273 TraceCheckUtils]: 1: Hoare triple {78045#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {78045#true} is VALID [2018-11-18 23:31:43,592 INFO L273 TraceCheckUtils]: 2: Hoare triple {78045#true} assume true; {78045#true} is VALID [2018-11-18 23:31:43,592 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {78045#true} {78045#true} #813#return; {78045#true} is VALID [2018-11-18 23:31:43,592 INFO L256 TraceCheckUtils]: 4: Hoare triple {78045#true} call #t~ret127 := main(); {78045#true} is VALID [2018-11-18 23:31:43,592 INFO L273 TraceCheckUtils]: 5: Hoare triple {78045#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {78045#true} is VALID [2018-11-18 23:31:43,593 INFO L256 TraceCheckUtils]: 6: Hoare triple {78045#true} call _BLAST_init(); {78045#true} is VALID [2018-11-18 23:31:43,593 INFO L273 TraceCheckUtils]: 7: Hoare triple {78045#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {78045#true} is VALID [2018-11-18 23:31:43,593 INFO L273 TraceCheckUtils]: 8: Hoare triple {78045#true} assume true; {78045#true} is VALID [2018-11-18 23:31:43,593 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {78045#true} {78045#true} #697#return; {78045#true} is VALID [2018-11-18 23:31:43,593 INFO L273 TraceCheckUtils]: 10: Hoare triple {78045#true} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {78045#true} is VALID [2018-11-18 23:31:43,594 INFO L273 TraceCheckUtils]: 11: Hoare triple {78045#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {78045#true} is VALID [2018-11-18 23:31:43,594 INFO L256 TraceCheckUtils]: 12: Hoare triple {78045#true} call stub_driver_init(); {78045#true} is VALID [2018-11-18 23:31:43,594 INFO L273 TraceCheckUtils]: 13: Hoare triple {78045#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {78045#true} is VALID [2018-11-18 23:31:43,594 INFO L273 TraceCheckUtils]: 14: Hoare triple {78045#true} assume true; {78045#true} is VALID [2018-11-18 23:31:43,594 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {78045#true} {78045#true} #699#return; {78045#true} is VALID [2018-11-18 23:31:43,594 INFO L273 TraceCheckUtils]: 16: Hoare triple {78045#true} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {78045#true} is VALID [2018-11-18 23:31:43,595 INFO L273 TraceCheckUtils]: 17: Hoare triple {78045#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {78045#true} is VALID [2018-11-18 23:31:43,595 INFO L273 TraceCheckUtils]: 18: Hoare triple {78045#true} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {78045#true} is VALID [2018-11-18 23:31:43,595 INFO L273 TraceCheckUtils]: 19: Hoare triple {78045#true} assume 3 == ~tmp_ndt_3~0; {78045#true} is VALID [2018-11-18 23:31:43,595 INFO L256 TraceCheckUtils]: 20: Hoare triple {78045#true} call #t~ret110 := DiskPerfDispatchPnp(~devobj~0, ~pirp~0); {78045#true} is VALID [2018-11-18 23:31:43,595 INFO L273 TraceCheckUtils]: 21: Hoare triple {78045#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet0;havoc #t~nondet0;assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647;~irpSp__MinorFunction~0 := #t~nondet1;havoc #t~nondet1;havoc ~irpSp~0;havoc ~status~0;havoc ~tmp~0;~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {78045#true} is VALID [2018-11-18 23:31:43,595 INFO L273 TraceCheckUtils]: 22: Hoare triple {78045#true} assume !(0 == ~irpSp__MinorFunction~0); {78045#true} is VALID [2018-11-18 23:31:43,596 INFO L273 TraceCheckUtils]: 23: Hoare triple {78045#true} assume 2 == ~irpSp__MinorFunction~0; {78045#true} is VALID [2018-11-18 23:31:43,596 INFO L256 TraceCheckUtils]: 24: Hoare triple {78045#true} call #t~ret3 := DiskPerfRemoveDevice(~DeviceObject, ~Irp); {78045#true} is VALID [2018-11-18 23:31:43,596 INFO L273 TraceCheckUtils]: 25: Hoare triple {78045#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~DeviceObject__DeviceExtension~1 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~deviceExtension__WmilibContext~0 := #t~nondet11;havoc #t~nondet11;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~deviceExtension~1;havoc ~wmilibContext~0;~deviceExtension~1 := ~DeviceObject__DeviceExtension~1;~wmilibContext~0 := ~deviceExtension__WmilibContext~0; {78045#true} is VALID [2018-11-18 23:31:43,596 INFO L256 TraceCheckUtils]: 26: Hoare triple {78045#true} call #t~ret12 := DiskPerfForwardIrpSynchronous(~DeviceObject, ~Irp); {78045#true} is VALID [2018-11-18 23:31:43,596 INFO L273 TraceCheckUtils]: 27: Hoare triple {78045#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~3 := #t~nondet27;havoc #t~nondet27;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~DeviceObject__DeviceExtension~4 := #t~nondet28;havoc #t~nondet28;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~deviceExtension__TargetDeviceObject~3 := #t~nondet29;havoc #t~nondet29;havoc ~deviceExtension~4;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~event~0 := #t~nondet30;havoc #t~nondet30;havoc ~status~3;havoc ~nextIrpSp__Control~0;havoc ~irpSp~1;havoc ~nextIrpSp~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~irpSp___0~0;havoc ~__cil_tmp15~0;~deviceExtension~4 := ~DeviceObject__DeviceExtension~4;~irpSp~1 := ~Irp__Tail__Overlay__CurrentStackLocation~3;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~3 - 1;~nextIrpSp__Control~0 := 0; {78045#true} is VALID [2018-11-18 23:31:43,596 INFO L273 TraceCheckUtils]: 28: Hoare triple {78045#true} assume !(~s~0 != ~NP~0); {78045#true} is VALID [2018-11-18 23:31:43,597 INFO L273 TraceCheckUtils]: 29: Hoare triple {78045#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~routine~0 := 0; {78045#true} is VALID [2018-11-18 23:31:43,597 INFO L273 TraceCheckUtils]: 30: Hoare triple {78045#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~3 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {78045#true} is VALID [2018-11-18 23:31:43,597 INFO L256 TraceCheckUtils]: 31: Hoare triple {78045#true} call #t~ret31 := IofCallDriver(~deviceExtension__TargetDeviceObject~3, ~Irp); {78045#true} is VALID [2018-11-18 23:31:43,597 INFO L273 TraceCheckUtils]: 32: Hoare triple {78045#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~lcontext~0 := #t~nondet115;havoc #t~nondet115;havoc ~__cil_tmp7~0; {78045#true} is VALID [2018-11-18 23:31:43,597 INFO L273 TraceCheckUtils]: 33: Hoare triple {78045#true} assume 0 != ~compRegistered~0; {78045#true} is VALID [2018-11-18 23:31:43,597 INFO L273 TraceCheckUtils]: 34: Hoare triple {78045#true} assume 0 == ~routine~0; {78045#true} is VALID [2018-11-18 23:31:43,598 INFO L256 TraceCheckUtils]: 35: Hoare triple {78045#true} call #t~ret116 := DiskPerfIrpCompletion(~DeviceObject, ~Irp, ~lcontext~0); {78045#true} is VALID [2018-11-18 23:31:43,598 INFO L273 TraceCheckUtils]: 36: Hoare triple {78045#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~Event~0;~Event~0 := ~Context; {78045#true} is VALID [2018-11-18 23:31:43,598 INFO L256 TraceCheckUtils]: 37: Hoare triple {78045#true} call #t~ret5 := KeSetEvent(~Event~0, 0, 0); {78045#true} is VALID [2018-11-18 23:31:43,598 INFO L273 TraceCheckUtils]: 38: Hoare triple {78045#true} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~l~0 := #t~nondet120;havoc #t~nondet120;~setEventCalled~0 := 1;#res := ~l~0; {78045#true} is VALID [2018-11-18 23:31:43,598 INFO L273 TraceCheckUtils]: 39: Hoare triple {78045#true} assume true; {78045#true} is VALID [2018-11-18 23:31:43,599 INFO L268 TraceCheckUtils]: 40: Hoare quadruple {78045#true} {78045#true} #795#return; {78045#true} is VALID [2018-11-18 23:31:43,599 INFO L273 TraceCheckUtils]: 41: Hoare triple {78045#true} assume -2147483648 <= #t~ret5 && #t~ret5 <= 2147483647;havoc #t~ret5;#res := -1073741802; {78045#true} is VALID [2018-11-18 23:31:43,599 INFO L273 TraceCheckUtils]: 42: Hoare triple {78045#true} assume true; {78045#true} is VALID [2018-11-18 23:31:43,599 INFO L268 TraceCheckUtils]: 43: Hoare quadruple {78045#true} {78045#true} #797#return; {78045#true} is VALID [2018-11-18 23:31:43,599 INFO L273 TraceCheckUtils]: 44: Hoare triple {78045#true} assume -2147483648 <= #t~ret116 && #t~ret116 <= 2147483647;~compRetStatus~0 := #t~ret116;havoc #t~ret116; {78045#true} is VALID [2018-11-18 23:31:43,599 INFO L273 TraceCheckUtils]: 45: Hoare triple {78045#true} ~__cil_tmp7~0 := ~compRetStatus~0; {78045#true} is VALID [2018-11-18 23:31:43,600 INFO L273 TraceCheckUtils]: 46: Hoare triple {78045#true} assume !(3221225494 == ~__cil_tmp7~0 % 4294967296); {78045#true} is VALID [2018-11-18 23:31:43,600 INFO L273 TraceCheckUtils]: 47: Hoare triple {78045#true} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet118 && #t~nondet118 <= 2147483647;~tmp_ndt_8~0 := #t~nondet118;havoc #t~nondet118; {78045#true} is VALID [2018-11-18 23:31:43,600 INFO L273 TraceCheckUtils]: 48: Hoare triple {78045#true} assume !(0 == ~tmp_ndt_8~0);havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647;~tmp_ndt_9~0 := #t~nondet119;havoc #t~nondet119; {78045#true} is VALID [2018-11-18 23:31:43,600 INFO L273 TraceCheckUtils]: 49: Hoare triple {78045#true} assume 1 == ~tmp_ndt_9~0; {78045#true} is VALID [2018-11-18 23:31:43,600 INFO L273 TraceCheckUtils]: 50: Hoare triple {78045#true} ~returnVal2~0 := -1073741823; {78045#true} is VALID [2018-11-18 23:31:43,600 INFO L273 TraceCheckUtils]: 51: Hoare triple {78045#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {78045#true} is VALID [2018-11-18 23:31:43,601 INFO L273 TraceCheckUtils]: 52: Hoare triple {78045#true} #res := ~returnVal2~0; {78045#true} is VALID [2018-11-18 23:31:43,601 INFO L273 TraceCheckUtils]: 53: Hoare triple {78045#true} assume true; {78045#true} is VALID [2018-11-18 23:31:43,601 INFO L268 TraceCheckUtils]: 54: Hoare quadruple {78045#true} {78045#true} #755#return; {78045#true} is VALID [2018-11-18 23:31:43,601 INFO L273 TraceCheckUtils]: 55: Hoare triple {78045#true} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~3 := #t~ret31;havoc #t~ret31;~__cil_tmp15~0 := ~status~3; {78045#true} is VALID [2018-11-18 23:31:43,601 INFO L273 TraceCheckUtils]: 56: Hoare triple {78045#true} assume 259 == ~__cil_tmp15~0; {78045#true} is VALID [2018-11-18 23:31:43,601 INFO L256 TraceCheckUtils]: 57: Hoare triple {78045#true} call #t~ret32 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {78045#true} is VALID [2018-11-18 23:31:43,602 INFO L273 TraceCheckUtils]: 58: Hoare triple {78045#true} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {78045#true} is VALID [2018-11-18 23:31:43,616 INFO L273 TraceCheckUtils]: 59: Hoare triple {78045#true} assume !(~s~0 == ~MPR3~0); {78047#(not (= ~MPR3~0 ~s~0))} is VALID [2018-11-18 23:31:43,625 INFO L273 TraceCheckUtils]: 60: Hoare triple {78047#(not (= ~MPR3~0 ~s~0))} assume !(1 == ~customIrp~0); {78047#(not (= ~MPR3~0 ~s~0))} is VALID [2018-11-18 23:31:43,637 INFO L273 TraceCheckUtils]: 61: Hoare triple {78047#(not (= ~MPR3~0 ~s~0))} assume ~s~0 == ~MPR3~0; {78046#false} is VALID [2018-11-18 23:31:43,638 INFO L256 TraceCheckUtils]: 62: Hoare triple {78046#false} call errorFn(); {78046#false} is VALID [2018-11-18 23:31:43,638 INFO L273 TraceCheckUtils]: 63: Hoare triple {78046#false} assume !false; {78046#false} is VALID [2018-11-18 23:31:43,640 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:31:43,640 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:31:43,640 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 23:31:43,641 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 64 [2018-11-18 23:31:43,641 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:31:43,641 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-18 23:31:43,723 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:31:43,723 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 23:31:43,723 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 23:31:43,723 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:31:43,724 INFO L87 Difference]: Start difference. First operand 477 states and 744 transitions. Second operand 3 states. [2018-11-18 23:31:48,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:48,411 INFO L93 Difference]: Finished difference Result 730 states and 1191 transitions. [2018-11-18 23:31:48,411 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 23:31:48,411 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 64 [2018-11-18 23:31:48,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:31:48,411 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:31:48,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 373 transitions. [2018-11-18 23:31:48,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:31:48,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 373 transitions. [2018-11-18 23:31:48,416 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 373 transitions. [2018-11-18 23:31:48,862 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 373 edges. 373 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:31:48,895 INFO L225 Difference]: With dead ends: 730 [2018-11-18 23:31:48,895 INFO L226 Difference]: Without dead ends: 727 [2018-11-18 23:31:48,896 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:31:48,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 727 states. [2018-11-18 23:31:51,379 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 727 to 483. [2018-11-18 23:31:51,380 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:31:51,380 INFO L82 GeneralOperation]: Start isEquivalent. First operand 727 states. Second operand 483 states. [2018-11-18 23:31:51,380 INFO L74 IsIncluded]: Start isIncluded. First operand 727 states. Second operand 483 states. [2018-11-18 23:31:51,380 INFO L87 Difference]: Start difference. First operand 727 states. Second operand 483 states. [2018-11-18 23:31:51,412 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:51,412 INFO L93 Difference]: Finished difference Result 727 states and 1186 transitions. [2018-11-18 23:31:51,412 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 1186 transitions. [2018-11-18 23:31:51,415 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:31:51,415 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:31:51,415 INFO L74 IsIncluded]: Start isIncluded. First operand 483 states. Second operand 727 states. [2018-11-18 23:31:51,415 INFO L87 Difference]: Start difference. First operand 483 states. Second operand 727 states. [2018-11-18 23:31:51,447 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:31:51,447 INFO L93 Difference]: Finished difference Result 727 states and 1186 transitions. [2018-11-18 23:31:51,448 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 1186 transitions. [2018-11-18 23:31:51,449 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:31:51,449 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:31:51,450 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:31:51,450 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:31:51,450 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 483 states. [2018-11-18 23:31:51,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 483 states to 483 states and 753 transitions. [2018-11-18 23:31:51,464 INFO L78 Accepts]: Start accepts. Automaton has 483 states and 753 transitions. Word has length 64 [2018-11-18 23:31:51,464 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:31:51,464 INFO L480 AbstractCegarLoop]: Abstraction has 483 states and 753 transitions. [2018-11-18 23:31:51,464 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 23:31:51,464 INFO L276 IsEmpty]: Start isEmpty. Operand 483 states and 753 transitions. [2018-11-18 23:31:51,465 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-18 23:31:51,465 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:31:51,465 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:31:51,465 INFO L423 AbstractCegarLoop]: === Iteration 29 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:31:51,465 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:31:51,466 INFO L82 PathProgramCache]: Analyzing trace with hash 966405873, now seen corresponding path program 1 times [2018-11-18 23:31:51,466 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:31:51,466 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:31:51,466 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:31:51,467 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:31:51,467 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:31:51,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:31:52,184 WARN L180 SmtUtils]: Spent 116.00 ms on a formula simplification. DAG size of input: 8 DAG size of output: 4 [2018-11-18 23:31:52,263 INFO L256 TraceCheckUtils]: 0: Hoare triple {81131#true} call ULTIMATE.init(); {81131#true} is VALID [2018-11-18 23:31:52,263 INFO L273 TraceCheckUtils]: 1: Hoare triple {81131#true} ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0; {81131#true} is VALID [2018-11-18 23:31:52,263 INFO L273 TraceCheckUtils]: 2: Hoare triple {81131#true} assume true; {81131#true} is VALID [2018-11-18 23:31:52,263 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {81131#true} {81131#true} #813#return; {81131#true} is VALID [2018-11-18 23:31:52,264 INFO L256 TraceCheckUtils]: 4: Hoare triple {81131#true} call #t~ret127 := main(); {81131#true} is VALID [2018-11-18 23:31:52,264 INFO L273 TraceCheckUtils]: 5: Hoare triple {81131#true} assume -2147483648 <= #t~nondet97 && #t~nondet97 <= 2147483647;~d~0 := #t~nondet97;havoc #t~nondet97;assume -2147483648 <= #t~nondet98 && #t~nondet98 <= 2147483647;~status~6 := #t~nondet98;havoc #t~nondet98;assume -2147483648 <= #t~nondet99 && #t~nondet99 <= 2147483647;~we_should_unload~0 := #t~nondet99;havoc #t~nondet99;assume -2147483648 <= #t~nondet100 && #t~nondet100 <= 2147483647;~irp~1 := #t~nondet100;havoc #t~nondet100;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet101 && #t~nondet101 <= 2147483647;~irp_choice~0 := #t~nondet101;havoc #t~nondet101;assume -2147483648 <= #t~nondet102 && #t~nondet102 <= 2147483647;~devobj~0 := #t~nondet102;havoc #t~nondet102;havoc ~__cil_tmp9~0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~routine~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~KernelMode~0 := 0;~pirp~0 := ~irp~1; {81131#true} is VALID [2018-11-18 23:31:52,264 INFO L256 TraceCheckUtils]: 6: Hoare triple {81131#true} call _BLAST_init(); {81131#true} is VALID [2018-11-18 23:31:52,265 INFO L273 TraceCheckUtils]: 7: Hoare triple {81131#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,265 INFO L273 TraceCheckUtils]: 8: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} assume true; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,265 INFO L268 TraceCheckUtils]: 9: Hoare quadruple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} {81131#true} #697#return; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,267 INFO L273 TraceCheckUtils]: 10: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} assume ~status~6 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,267 INFO L273 TraceCheckUtils]: 11: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,267 INFO L256 TraceCheckUtils]: 12: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} call stub_driver_init(); {81131#true} is VALID [2018-11-18 23:31:52,267 INFO L273 TraceCheckUtils]: 13: Hoare triple {81131#true} ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; {81131#true} is VALID [2018-11-18 23:31:52,267 INFO L273 TraceCheckUtils]: 14: Hoare triple {81131#true} assume true; {81131#true} is VALID [2018-11-18 23:31:52,269 INFO L268 TraceCheckUtils]: 15: Hoare quadruple {81131#true} {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} #699#return; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,269 INFO L273 TraceCheckUtils]: 16: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} assume !(~status~6 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet103 && #t~nondet103 <= 2147483647;~tmp_ndt_1~0 := #t~nondet103;havoc #t~nondet103; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,271 INFO L273 TraceCheckUtils]: 17: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~tmp_ndt_2~0 := #t~nondet104;havoc #t~nondet104; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,271 INFO L273 TraceCheckUtils]: 18: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} assume !(2 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_3~0 := #t~nondet105;havoc #t~nondet105; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,272 INFO L273 TraceCheckUtils]: 19: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} assume 3 == ~tmp_ndt_3~0; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,272 INFO L256 TraceCheckUtils]: 20: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} call #t~ret110 := DiskPerfDispatchPnp(~devobj~0, ~pirp~0); {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,272 INFO L273 TraceCheckUtils]: 21: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet0;havoc #t~nondet0;assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647;~irpSp__MinorFunction~0 := #t~nondet1;havoc #t~nondet1;havoc ~irpSp~0;havoc ~status~0;havoc ~tmp~0;~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,273 INFO L273 TraceCheckUtils]: 22: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} assume 0 == ~irpSp__MinorFunction~0; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,273 INFO L256 TraceCheckUtils]: 23: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} call #t~ret2 := DiskPerfStartDevice(~DeviceObject, ~Irp); {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,274 INFO L273 TraceCheckUtils]: 24: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~deviceExtension__TargetDeviceObject~0 := #t~nondet7;havoc #t~nondet7;havoc ~Irp__IoStatus__Status~0;havoc ~deviceExtension~0;havoc ~status~1;~deviceExtension~0 := ~DeviceObject__DeviceExtension~0; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,274 INFO L256 TraceCheckUtils]: 25: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} call #t~ret8 := DiskPerfForwardIrpSynchronous(~DeviceObject, ~Irp); {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,274 INFO L273 TraceCheckUtils]: 26: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~3 := #t~nondet27;havoc #t~nondet27;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~DeviceObject__DeviceExtension~4 := #t~nondet28;havoc #t~nondet28;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~deviceExtension__TargetDeviceObject~3 := #t~nondet29;havoc #t~nondet29;havoc ~deviceExtension~4;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~event~0 := #t~nondet30;havoc #t~nondet30;havoc ~status~3;havoc ~nextIrpSp__Control~0;havoc ~irpSp~1;havoc ~nextIrpSp~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~irpSp___0~0;havoc ~__cil_tmp15~0;~deviceExtension~4 := ~DeviceObject__DeviceExtension~4;~irpSp~1 := ~Irp__Tail__Overlay__CurrentStackLocation~3;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~3 - 1;~nextIrpSp__Control~0 := 0; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,275 INFO L273 TraceCheckUtils]: 27: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} assume !(~s~0 != ~NP~0); {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,275 INFO L273 TraceCheckUtils]: 28: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~routine~0 := 0; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,276 INFO L273 TraceCheckUtils]: 29: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~3 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} is VALID [2018-11-18 23:31:52,276 INFO L256 TraceCheckUtils]: 30: Hoare triple {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} call #t~ret31 := IofCallDriver(~deviceExtension__TargetDeviceObject~3, ~Irp); {81131#true} is VALID [2018-11-18 23:31:52,276 INFO L273 TraceCheckUtils]: 31: Hoare triple {81131#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~lcontext~0 := #t~nondet115;havoc #t~nondet115;havoc ~__cil_tmp7~0; {81131#true} is VALID [2018-11-18 23:31:52,276 INFO L273 TraceCheckUtils]: 32: Hoare triple {81131#true} assume 0 != ~compRegistered~0; {81131#true} is VALID [2018-11-18 23:31:52,277 INFO L273 TraceCheckUtils]: 33: Hoare triple {81131#true} assume 0 == ~routine~0; {81131#true} is VALID [2018-11-18 23:31:52,277 INFO L256 TraceCheckUtils]: 34: Hoare triple {81131#true} call #t~ret116 := DiskPerfIrpCompletion(~DeviceObject, ~Irp, ~lcontext~0); {81131#true} is VALID [2018-11-18 23:31:52,277 INFO L273 TraceCheckUtils]: 35: Hoare triple {81131#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~Event~0;~Event~0 := ~Context; {81131#true} is VALID [2018-11-18 23:31:52,278 INFO L256 TraceCheckUtils]: 36: Hoare triple {81131#true} call #t~ret5 := KeSetEvent(~Event~0, 0, 0); {81131#true} is VALID [2018-11-18 23:31:52,278 INFO L273 TraceCheckUtils]: 37: Hoare triple {81131#true} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~l~0 := #t~nondet120;havoc #t~nondet120;~setEventCalled~0 := 1;#res := ~l~0; {81131#true} is VALID [2018-11-18 23:31:52,278 INFO L273 TraceCheckUtils]: 38: Hoare triple {81131#true} assume true; {81131#true} is VALID [2018-11-18 23:31:52,278 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {81131#true} {81131#true} #795#return; {81131#true} is VALID [2018-11-18 23:31:52,279 INFO L273 TraceCheckUtils]: 40: Hoare triple {81131#true} assume -2147483648 <= #t~ret5 && #t~ret5 <= 2147483647;havoc #t~ret5;#res := -1073741802; {81131#true} is VALID [2018-11-18 23:31:52,279 INFO L273 TraceCheckUtils]: 41: Hoare triple {81131#true} assume true; {81131#true} is VALID [2018-11-18 23:31:52,279 INFO L268 TraceCheckUtils]: 42: Hoare quadruple {81131#true} {81131#true} #797#return; {81131#true} is VALID [2018-11-18 23:31:52,280 INFO L273 TraceCheckUtils]: 43: Hoare triple {81131#true} assume -2147483648 <= #t~ret116 && #t~ret116 <= 2147483647;~compRetStatus~0 := #t~ret116;havoc #t~ret116; {81131#true} is VALID [2018-11-18 23:31:52,280 INFO L273 TraceCheckUtils]: 44: Hoare triple {81131#true} ~__cil_tmp7~0 := ~compRetStatus~0; {81131#true} is VALID [2018-11-18 23:31:52,280 INFO L273 TraceCheckUtils]: 45: Hoare triple {81131#true} assume !(3221225494 == ~__cil_tmp7~0 % 4294967296); {81131#true} is VALID [2018-11-18 23:31:52,280 INFO L273 TraceCheckUtils]: 46: Hoare triple {81131#true} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet118 && #t~nondet118 <= 2147483647;~tmp_ndt_8~0 := #t~nondet118;havoc #t~nondet118; {81131#true} is VALID [2018-11-18 23:31:52,280 INFO L273 TraceCheckUtils]: 47: Hoare triple {81131#true} assume !(0 == ~tmp_ndt_8~0);havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647;~tmp_ndt_9~0 := #t~nondet119;havoc #t~nondet119; {81131#true} is VALID [2018-11-18 23:31:52,281 INFO L273 TraceCheckUtils]: 48: Hoare triple {81131#true} assume 1 == ~tmp_ndt_9~0; {81131#true} is VALID [2018-11-18 23:31:52,281 INFO L273 TraceCheckUtils]: 49: Hoare triple {81131#true} ~returnVal2~0 := -1073741823; {81131#true} is VALID [2018-11-18 23:31:52,291 INFO L273 TraceCheckUtils]: 50: Hoare triple {81131#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {81134#(<= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:31:52,303 INFO L273 TraceCheckUtils]: 51: Hoare triple {81134#(<= ~IPC~0 ~s~0)} #res := ~returnVal2~0; {81134#(<= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:31:52,316 INFO L273 TraceCheckUtils]: 52: Hoare triple {81134#(<= ~IPC~0 ~s~0)} assume true; {81134#(<= ~IPC~0 ~s~0)} is VALID [2018-11-18 23:31:52,329 INFO L268 TraceCheckUtils]: 53: Hoare quadruple {81134#(<= ~IPC~0 ~s~0)} {81133#(<= (+ ~MPR3~0 1) ~IPC~0)} #755#return; {81135#(not (= ~MPR3~0 ~s~0))} is VALID [2018-11-18 23:31:52,332 INFO L273 TraceCheckUtils]: 54: Hoare triple {81135#(not (= ~MPR3~0 ~s~0))} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~3 := #t~ret31;havoc #t~ret31;~__cil_tmp15~0 := ~status~3; {81135#(not (= ~MPR3~0 ~s~0))} is VALID [2018-11-18 23:31:52,334 INFO L273 TraceCheckUtils]: 55: Hoare triple {81135#(not (= ~MPR3~0 ~s~0))} assume 259 == ~__cil_tmp15~0; {81135#(not (= ~MPR3~0 ~s~0))} is VALID [2018-11-18 23:31:52,335 INFO L256 TraceCheckUtils]: 56: Hoare triple {81135#(not (= ~MPR3~0 ~s~0))} call #t~ret32 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {81135#(not (= ~MPR3~0 ~s~0))} is VALID [2018-11-18 23:31:52,336 INFO L273 TraceCheckUtils]: 57: Hoare triple {81135#(not (= ~MPR3~0 ~s~0))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {81135#(not (= ~MPR3~0 ~s~0))} is VALID [2018-11-18 23:31:52,338 INFO L273 TraceCheckUtils]: 58: Hoare triple {81135#(not (= ~MPR3~0 ~s~0))} assume ~s~0 == ~MPR3~0; {81132#false} is VALID [2018-11-18 23:31:52,338 INFO L273 TraceCheckUtils]: 59: Hoare triple {81132#false} assume !(1 == ~setEventCalled~0); {81132#false} is VALID [2018-11-18 23:31:52,338 INFO L273 TraceCheckUtils]: 60: Hoare triple {81132#false} assume !(1 == ~customIrp~0); {81132#false} is VALID [2018-11-18 23:31:52,338 INFO L273 TraceCheckUtils]: 61: Hoare triple {81132#false} assume ~s~0 == ~MPR3~0; {81132#false} is VALID [2018-11-18 23:31:52,338 INFO L256 TraceCheckUtils]: 62: Hoare triple {81132#false} call errorFn(); {81132#false} is VALID [2018-11-18 23:31:52,338 INFO L273 TraceCheckUtils]: 63: Hoare triple {81132#false} assume !false; {81132#false} is VALID [2018-11-18 23:31:52,345 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:31:52,345 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:31:52,345 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 23:31:52,345 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 64 [2018-11-18 23:31:52,346 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:31:52,346 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2018-11-18 23:31:52,510 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:31:52,510 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-18 23:31:52,510 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 23:31:52,511 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:31:52,511 INFO L87 Difference]: Start difference. First operand 483 states and 753 transitions. Second operand 5 states.