/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl1.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.1.25-8fc6572 [2020-07-10 15:01:16,725 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-10 15:01:16,728 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-10 15:01:16,746 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-10 15:01:16,746 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-10 15:01:16,748 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-10 15:01:16,750 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-10 15:01:16,759 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-10 15:01:16,762 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-10 15:01:16,765 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-10 15:01:16,767 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-10 15:01:16,769 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-10 15:01:16,769 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-10 15:01:16,770 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-10 15:01:16,772 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-10 15:01:16,774 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-10 15:01:16,775 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-10 15:01:16,776 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-10 15:01:16,777 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-10 15:01:16,781 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-10 15:01:16,786 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-10 15:01:16,789 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-10 15:01:16,790 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-10 15:01:16,791 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-10 15:01:16,793 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-10 15:01:16,793 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-10 15:01:16,793 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-10 15:01:16,795 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-10 15:01:16,796 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-10 15:01:16,797 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-10 15:01:16,797 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-10 15:01:16,797 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-10 15:01:16,798 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-10 15:01:16,799 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-10 15:01:16,800 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-10 15:01:16,800 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-10 15:01:16,801 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-10 15:01:16,801 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-10 15:01:16,802 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-10 15:01:16,804 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-10 15:01:16,805 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-10 15:01:16,806 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-10 15:01:16,843 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-10 15:01:16,844 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-10 15:01:16,845 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-10 15:01:16,845 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-10 15:01:16,845 INFO L138 SettingsManager]: * Use SBE=true [2020-07-10 15:01:16,845 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-10 15:01:16,846 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-10 15:01:16,846 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-10 15:01:16,846 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-10 15:01:16,846 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-10 15:01:16,846 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-10 15:01:16,846 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-10 15:01:16,847 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-10 15:01:16,847 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-10 15:01:16,847 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-10 15:01:16,849 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-10 15:01:16,849 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-10 15:01:16,849 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-10 15:01:16,850 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-10 15:01:16,850 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-10 15:01:16,850 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-10 15:01:16,850 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-10 15:01:16,850 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-10 15:01:16,851 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-10 15:01:16,851 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-10 15:01:16,851 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-10 15:01:16,851 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-10 15:01:16,851 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-10 15:01:16,851 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-10 15:01:16,852 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2020-07-10 15:01:17,107 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-10 15:01:17,119 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-10 15:01:17,122 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-10 15:01:17,124 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-10 15:01:17,124 INFO L275 PluginConnector]: CDTParser initialized [2020-07-10 15:01:17,125 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl1.cil.c [2020-07-10 15:01:17,197 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/26f83ab88/945fb4ac638e4b4297d6f1799abc225b/FLAG3d248e046 [2020-07-10 15:01:17,691 INFO L306 CDTParser]: Found 1 translation units. [2020-07-10 15:01:17,692 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl1.cil.c [2020-07-10 15:01:17,701 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/26f83ab88/945fb4ac638e4b4297d6f1799abc225b/FLAG3d248e046 [2020-07-10 15:01:18,061 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/26f83ab88/945fb4ac638e4b4297d6f1799abc225b [2020-07-10 15:01:18,071 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-10 15:01:18,073 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2020-07-10 15:01:18,074 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-10 15:01:18,074 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-10 15:01:18,077 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-10 15:01:18,079 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.07 03:01:18" (1/1) ... [2020-07-10 15:01:18,082 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2146713a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 03:01:18, skipping insertion in model container [2020-07-10 15:01:18,082 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.07 03:01:18" (1/1) ... [2020-07-10 15:01:18,090 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-10 15:01:18,146 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-10 15:01:18,447 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-10 15:01:18,460 INFO L203 MainTranslator]: Completed pre-run [2020-07-10 15:01:18,634 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-10 15:01:18,661 INFO L208 MainTranslator]: Completed translation [2020-07-10 15:01:18,661 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 03:01:18 WrapperNode [2020-07-10 15:01:18,661 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-10 15:01:18,662 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-10 15:01:18,662 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-10 15:01:18,662 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-10 15:01:18,675 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 03:01:18" (1/1) ... [2020-07-10 15:01:18,675 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 03:01:18" (1/1) ... [2020-07-10 15:01:18,685 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 03:01:18" (1/1) ... [2020-07-10 15:01:18,686 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 03:01:18" (1/1) ... [2020-07-10 15:01:18,705 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 03:01:18" (1/1) ... [2020-07-10 15:01:18,719 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 03:01:18" (1/1) ... [2020-07-10 15:01:18,722 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 03:01:18" (1/1) ... [2020-07-10 15:01:18,726 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-10 15:01:18,727 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-10 15:01:18,727 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-10 15:01:18,727 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-10 15:01:18,728 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 03:01:18" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-10 15:01:18,789 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2020-07-10 15:01:18,789 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-10 15:01:18,789 INFO L138 BoogieDeclarations]: Found implementation of procedure stub_driver_init [2020-07-10 15:01:18,789 INFO L138 BoogieDeclarations]: Found implementation of procedure _BLAST_init [2020-07-10 15:01:18,789 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_PnP [2020-07-10 15:01:18,789 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2020-07-10 15:01:18,789 INFO L138 BoogieDeclarations]: Found implementation of procedure stubMoreProcessingRequired [2020-07-10 15:01:18,790 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2020-07-10 15:01:18,790 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2020-07-10 15:01:18,790 INFO L138 BoogieDeclarations]: Found implementation of procedure KeSetEvent [2020-07-10 15:01:18,790 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2020-07-10 15:01:18,791 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Complete [2020-07-10 15:01:18,791 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2020-07-10 15:01:18,792 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2020-07-10 15:01:18,792 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_char [2020-07-10 15:01:18,792 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2020-07-10 15:01:18,793 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2020-07-10 15:01:18,793 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_PnP [2020-07-10 15:01:18,793 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2020-07-10 15:01:18,793 INFO L130 BoogieDeclarations]: Found specification of procedure KeSetEvent [2020-07-10 15:01:18,793 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2020-07-10 15:01:18,794 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Complete [2020-07-10 15:01:18,794 INFO L130 BoogieDeclarations]: Found specification of procedure stub_driver_init [2020-07-10 15:01:18,794 INFO L130 BoogieDeclarations]: Found specification of procedure _BLAST_init [2020-07-10 15:01:18,795 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2020-07-10 15:01:18,796 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2020-07-10 15:01:18,796 INFO L130 BoogieDeclarations]: Found specification of procedure main [2020-07-10 15:01:18,796 INFO L130 BoogieDeclarations]: Found specification of procedure stubMoreProcessingRequired [2020-07-10 15:01:18,796 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2020-07-10 15:01:18,796 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-10 15:01:19,086 WARN L775 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2020-07-10 15:01:19,260 INFO L728 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##14: assume !false; [2020-07-10 15:01:19,261 INFO L728 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##13: assume false; [2020-07-10 15:01:19,263 WARN L775 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2020-07-10 15:01:19,327 INFO L728 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##8: assume false; [2020-07-10 15:01:19,328 INFO L728 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##9: assume !false; [2020-07-10 15:01:19,345 WARN L775 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2020-07-10 15:01:19,383 INFO L728 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##16: assume !false; [2020-07-10 15:01:19,383 INFO L728 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##15: assume false; [2020-07-10 15:01:19,417 WARN L775 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2020-07-10 15:01:19,683 INFO L728 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##43: assume false; [2020-07-10 15:01:19,684 INFO L728 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##44: assume !false; [2020-07-10 15:01:19,744 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-10 15:01:19,744 INFO L295 CfgBuilder]: Removed 0 assume(true) statements. [2020-07-10 15:01:19,749 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.07 03:01:19 BoogieIcfgContainer [2020-07-10 15:01:19,749 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-10 15:01:19,750 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-10 15:01:19,750 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-10 15:01:19,754 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-10 15:01:19,754 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.07 03:01:18" (1/3) ... [2020-07-10 15:01:19,755 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3ad5e8d1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.07 03:01:19, skipping insertion in model container [2020-07-10 15:01:19,755 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 03:01:18" (2/3) ... [2020-07-10 15:01:19,756 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3ad5e8d1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.07 03:01:19, skipping insertion in model container [2020-07-10 15:01:19,756 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.07 03:01:19" (3/3) ... [2020-07-10 15:01:19,758 INFO L109 eAbstractionObserver]: Analyzing ICFG kbfiltr_simpl1.cil.c [2020-07-10 15:01:19,768 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-10 15:01:19,776 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2020-07-10 15:01:19,790 INFO L251 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2020-07-10 15:01:19,815 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-10 15:01:19,815 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-10 15:01:19,815 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-10 15:01:19,816 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-10 15:01:19,816 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-10 15:01:19,816 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-10 15:01:19,816 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-10 15:01:19,816 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-10 15:01:19,839 INFO L276 IsEmpty]: Start isEmpty. Operand 151 states. [2020-07-10 15:01:19,846 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2020-07-10 15:01:19,846 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:01:19,847 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:01:19,847 INFO L427 AbstractCegarLoop]: === Iteration 1 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:01:19,854 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:01:19,854 INFO L82 PathProgramCache]: Analyzing trace with hash -1530382191, now seen corresponding path program 1 times [2020-07-10 15:01:19,865 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:01:19,866 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1846937873] [2020-07-10 15:01:19,866 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:01:20,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:20,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:20,219 INFO L280 TraceCheckUtils]: 0: Hoare triple {163#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {154#true} is VALID [2020-07-10 15:01:20,220 INFO L280 TraceCheckUtils]: 1: Hoare triple {154#true} assume true; {154#true} is VALID [2020-07-10 15:01:20,221 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {154#true} {154#true} #460#return; {154#true} is VALID [2020-07-10 15:01:20,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:20,324 INFO L280 TraceCheckUtils]: 0: Hoare triple {164#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {154#true} is VALID [2020-07-10 15:01:20,325 INFO L280 TraceCheckUtils]: 1: Hoare triple {154#true} assume true; {154#true} is VALID [2020-07-10 15:01:20,327 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {154#true} {159#(<= 0 main_~status~1)} #440#return; {159#(<= 0 main_~status~1)} is VALID [2020-07-10 15:01:20,332 INFO L263 TraceCheckUtils]: 0: Hoare triple {154#true} call ULTIMATE.init(); {163#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:20,332 INFO L280 TraceCheckUtils]: 1: Hoare triple {163#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {154#true} is VALID [2020-07-10 15:01:20,333 INFO L280 TraceCheckUtils]: 2: Hoare triple {154#true} assume true; {154#true} is VALID [2020-07-10 15:01:20,333 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {154#true} {154#true} #460#return; {154#true} is VALID [2020-07-10 15:01:20,334 INFO L263 TraceCheckUtils]: 4: Hoare triple {154#true} call #t~ret31 := main(); {154#true} is VALID [2020-07-10 15:01:20,336 INFO L280 TraceCheckUtils]: 5: Hoare triple {154#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {159#(<= 0 main_~status~1)} is VALID [2020-07-10 15:01:20,338 INFO L263 TraceCheckUtils]: 6: Hoare triple {159#(<= 0 main_~status~1)} call _BLAST_init(); {164#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:20,339 INFO L280 TraceCheckUtils]: 7: Hoare triple {164#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {154#true} is VALID [2020-07-10 15:01:20,339 INFO L280 TraceCheckUtils]: 8: Hoare triple {154#true} assume true; {154#true} is VALID [2020-07-10 15:01:20,340 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {154#true} {159#(<= 0 main_~status~1)} #440#return; {159#(<= 0 main_~status~1)} is VALID [2020-07-10 15:01:20,342 INFO L280 TraceCheckUtils]: 10: Hoare triple {159#(<= 0 main_~status~1)} assume !(~status~1 >= 0); {155#false} is VALID [2020-07-10 15:01:20,342 INFO L280 TraceCheckUtils]: 11: Hoare triple {155#false} assume !(1 == ~pended~0); {155#false} is VALID [2020-07-10 15:01:20,343 INFO L280 TraceCheckUtils]: 12: Hoare triple {155#false} assume !(1 == ~pended~0); {155#false} is VALID [2020-07-10 15:01:20,343 INFO L280 TraceCheckUtils]: 13: Hoare triple {155#false} assume ~s~0 != ~UNLOADED~0; {155#false} is VALID [2020-07-10 15:01:20,343 INFO L280 TraceCheckUtils]: 14: Hoare triple {155#false} assume -1 != ~status~1; {155#false} is VALID [2020-07-10 15:01:20,344 INFO L280 TraceCheckUtils]: 15: Hoare triple {155#false} assume !(~s~0 != ~SKIP2~0); {155#false} is VALID [2020-07-10 15:01:20,344 INFO L280 TraceCheckUtils]: 16: Hoare triple {155#false} assume 1 == ~pended~0; {155#false} is VALID [2020-07-10 15:01:20,344 INFO L280 TraceCheckUtils]: 17: Hoare triple {155#false} assume 259 != ~status~1; {155#false} is VALID [2020-07-10 15:01:20,345 INFO L263 TraceCheckUtils]: 18: Hoare triple {155#false} call errorFn(); {155#false} is VALID [2020-07-10 15:01:20,345 INFO L280 TraceCheckUtils]: 19: Hoare triple {155#false} assume !false; {155#false} is VALID [2020-07-10 15:01:20,349 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:01:20,350 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1846937873] [2020-07-10 15:01:20,351 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:01:20,352 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-10 15:01:20,353 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [635857839] [2020-07-10 15:01:20,361 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 20 [2020-07-10 15:01:20,364 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:01:20,368 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-10 15:01:20,414 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:20,414 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-10 15:01:20,415 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:01:20,423 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-10 15:01:20,424 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2020-07-10 15:01:20,427 INFO L87 Difference]: Start difference. First operand 151 states. Second operand 5 states. [2020-07-10 15:01:22,581 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:22,581 INFO L93 Difference]: Finished difference Result 303 states and 463 transitions. [2020-07-10 15:01:22,581 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-10 15:01:22,582 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 20 [2020-07-10 15:01:22,582 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:01:22,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-10 15:01:22,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 463 transitions. [2020-07-10 15:01:22,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-10 15:01:22,654 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 463 transitions. [2020-07-10 15:01:22,655 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 463 transitions. [2020-07-10 15:01:23,346 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 463 edges. 463 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:23,368 INFO L225 Difference]: With dead ends: 303 [2020-07-10 15:01:23,368 INFO L226 Difference]: Without dead ends: 157 [2020-07-10 15:01:23,374 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2020-07-10 15:01:23,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2020-07-10 15:01:23,654 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 140. [2020-07-10 15:01:23,655 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:01:23,656 INFO L82 GeneralOperation]: Start isEquivalent. First operand 157 states. Second operand 140 states. [2020-07-10 15:01:23,656 INFO L74 IsIncluded]: Start isIncluded. First operand 157 states. Second operand 140 states. [2020-07-10 15:01:23,656 INFO L87 Difference]: Start difference. First operand 157 states. Second operand 140 states. [2020-07-10 15:01:23,670 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:23,670 INFO L93 Difference]: Finished difference Result 157 states and 214 transitions. [2020-07-10 15:01:23,671 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 214 transitions. [2020-07-10 15:01:23,674 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:23,674 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:23,674 INFO L74 IsIncluded]: Start isIncluded. First operand 140 states. Second operand 157 states. [2020-07-10 15:01:23,674 INFO L87 Difference]: Start difference. First operand 140 states. Second operand 157 states. [2020-07-10 15:01:23,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:23,685 INFO L93 Difference]: Finished difference Result 157 states and 214 transitions. [2020-07-10 15:01:23,685 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 214 transitions. [2020-07-10 15:01:23,688 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:23,688 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:23,688 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:01:23,688 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:01:23,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 140 states. [2020-07-10 15:01:23,697 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140 states to 140 states and 190 transitions. [2020-07-10 15:01:23,699 INFO L78 Accepts]: Start accepts. Automaton has 140 states and 190 transitions. Word has length 20 [2020-07-10 15:01:23,699 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:01:23,700 INFO L479 AbstractCegarLoop]: Abstraction has 140 states and 190 transitions. [2020-07-10 15:01:23,700 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-10 15:01:23,700 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 190 transitions. [2020-07-10 15:01:23,701 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2020-07-10 15:01:23,701 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:01:23,701 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:01:23,701 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-10 15:01:23,702 INFO L427 AbstractCegarLoop]: === Iteration 2 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:01:23,702 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:01:23,702 INFO L82 PathProgramCache]: Analyzing trace with hash 1141575010, now seen corresponding path program 1 times [2020-07-10 15:01:23,702 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:01:23,703 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [433426534] [2020-07-10 15:01:23,703 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:01:23,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:23,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:23,982 INFO L280 TraceCheckUtils]: 0: Hoare triple {1093#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {1081#true} is VALID [2020-07-10 15:01:23,982 INFO L280 TraceCheckUtils]: 1: Hoare triple {1081#true} assume true; {1081#true} is VALID [2020-07-10 15:01:23,983 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {1081#true} {1081#true} #460#return; {1081#true} is VALID [2020-07-10 15:01:24,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:24,049 INFO L280 TraceCheckUtils]: 0: Hoare triple {1094#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1081#true} is VALID [2020-07-10 15:01:24,049 INFO L280 TraceCheckUtils]: 1: Hoare triple {1081#true} assume true; {1081#true} is VALID [2020-07-10 15:01:24,050 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {1081#true} {1081#true} #440#return; {1081#true} is VALID [2020-07-10 15:01:24,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:24,090 INFO L280 TraceCheckUtils]: 0: Hoare triple {1095#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1092#(= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:24,091 INFO L280 TraceCheckUtils]: 1: Hoare triple {1092#(= ~s~0 ~NP~0)} assume true; {1092#(= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:24,092 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {1092#(= ~s~0 ~NP~0)} {1081#true} #442#return; {1092#(= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:24,094 INFO L263 TraceCheckUtils]: 0: Hoare triple {1081#true} call ULTIMATE.init(); {1093#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:24,094 INFO L280 TraceCheckUtils]: 1: Hoare triple {1093#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {1081#true} is VALID [2020-07-10 15:01:24,095 INFO L280 TraceCheckUtils]: 2: Hoare triple {1081#true} assume true; {1081#true} is VALID [2020-07-10 15:01:24,095 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {1081#true} {1081#true} #460#return; {1081#true} is VALID [2020-07-10 15:01:24,095 INFO L263 TraceCheckUtils]: 4: Hoare triple {1081#true} call #t~ret31 := main(); {1081#true} is VALID [2020-07-10 15:01:24,096 INFO L280 TraceCheckUtils]: 5: Hoare triple {1081#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {1081#true} is VALID [2020-07-10 15:01:24,097 INFO L263 TraceCheckUtils]: 6: Hoare triple {1081#true} call _BLAST_init(); {1094#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:24,098 INFO L280 TraceCheckUtils]: 7: Hoare triple {1094#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1081#true} is VALID [2020-07-10 15:01:24,098 INFO L280 TraceCheckUtils]: 8: Hoare triple {1081#true} assume true; {1081#true} is VALID [2020-07-10 15:01:24,098 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {1081#true} {1081#true} #440#return; {1081#true} is VALID [2020-07-10 15:01:24,099 INFO L280 TraceCheckUtils]: 10: Hoare triple {1081#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {1081#true} is VALID [2020-07-10 15:01:24,099 INFO L280 TraceCheckUtils]: 11: Hoare triple {1081#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {1081#true} is VALID [2020-07-10 15:01:24,100 INFO L263 TraceCheckUtils]: 12: Hoare triple {1081#true} call stub_driver_init(); {1095#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:24,101 INFO L280 TraceCheckUtils]: 13: Hoare triple {1095#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1092#(= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:24,101 INFO L280 TraceCheckUtils]: 14: Hoare triple {1092#(= ~s~0 ~NP~0)} assume true; {1092#(= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:24,102 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {1092#(= ~s~0 ~NP~0)} {1081#true} #442#return; {1092#(= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:24,103 INFO L280 TraceCheckUtils]: 16: Hoare triple {1092#(= ~s~0 ~NP~0)} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {1092#(= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:24,103 INFO L280 TraceCheckUtils]: 17: Hoare triple {1092#(= ~s~0 ~NP~0)} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {1092#(= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:24,104 INFO L280 TraceCheckUtils]: 18: Hoare triple {1092#(= ~s~0 ~NP~0)} assume 3 == ~tmp_ndt_1~0; {1092#(= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:24,105 INFO L263 TraceCheckUtils]: 19: Hoare triple {1092#(= ~s~0 ~NP~0)} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {1092#(= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:24,106 INFO L280 TraceCheckUtils]: 20: Hoare triple {1092#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {1092#(= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:24,106 INFO L280 TraceCheckUtils]: 21: Hoare triple {1092#(= ~s~0 ~NP~0)} assume 0 == ~irpStack__MinorFunction~0; {1092#(= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:24,107 INFO L280 TraceCheckUtils]: 22: Hoare triple {1092#(= ~s~0 ~NP~0)} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {1092#(= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:24,108 INFO L280 TraceCheckUtils]: 23: Hoare triple {1092#(= ~s~0 ~NP~0)} assume ~s~0 != ~NP~0; {1082#false} is VALID [2020-07-10 15:01:24,108 INFO L263 TraceCheckUtils]: 24: Hoare triple {1082#false} call errorFn(); {1082#false} is VALID [2020-07-10 15:01:24,108 INFO L280 TraceCheckUtils]: 25: Hoare triple {1082#false} assume !false; {1082#false} is VALID [2020-07-10 15:01:24,111 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:01:24,111 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [433426534] [2020-07-10 15:01:24,111 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:01:24,112 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-10 15:01:24,112 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [206945361] [2020-07-10 15:01:24,114 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 26 [2020-07-10 15:01:24,114 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:01:24,114 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-10 15:01:24,165 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:24,166 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-10 15:01:24,166 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:01:24,166 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-10 15:01:24,167 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2020-07-10 15:01:24,167 INFO L87 Difference]: Start difference. First operand 140 states and 190 transitions. Second operand 6 states. [2020-07-10 15:01:26,739 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:26,740 INFO L93 Difference]: Finished difference Result 275 states and 370 transitions. [2020-07-10 15:01:26,740 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-10 15:01:26,740 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 26 [2020-07-10 15:01:26,741 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:01:26,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-10 15:01:26,758 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 370 transitions. [2020-07-10 15:01:26,758 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-10 15:01:26,770 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 370 transitions. [2020-07-10 15:01:26,770 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 370 transitions. [2020-07-10 15:01:27,305 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 370 edges. 370 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:27,317 INFO L225 Difference]: With dead ends: 275 [2020-07-10 15:01:27,317 INFO L226 Difference]: Without dead ends: 219 [2020-07-10 15:01:27,321 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2020-07-10 15:01:27,325 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 219 states. [2020-07-10 15:01:27,702 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 219 to 195. [2020-07-10 15:01:27,702 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:01:27,703 INFO L82 GeneralOperation]: Start isEquivalent. First operand 219 states. Second operand 195 states. [2020-07-10 15:01:27,703 INFO L74 IsIncluded]: Start isIncluded. First operand 219 states. Second operand 195 states. [2020-07-10 15:01:27,703 INFO L87 Difference]: Start difference. First operand 219 states. Second operand 195 states. [2020-07-10 15:01:27,714 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:27,714 INFO L93 Difference]: Finished difference Result 219 states and 291 transitions. [2020-07-10 15:01:27,714 INFO L276 IsEmpty]: Start isEmpty. Operand 219 states and 291 transitions. [2020-07-10 15:01:27,717 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:27,717 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:27,717 INFO L74 IsIncluded]: Start isIncluded. First operand 195 states. Second operand 219 states. [2020-07-10 15:01:27,717 INFO L87 Difference]: Start difference. First operand 195 states. Second operand 219 states. [2020-07-10 15:01:27,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:27,728 INFO L93 Difference]: Finished difference Result 219 states and 291 transitions. [2020-07-10 15:01:27,728 INFO L276 IsEmpty]: Start isEmpty. Operand 219 states and 291 transitions. [2020-07-10 15:01:27,730 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:27,730 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:27,730 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:01:27,730 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:01:27,730 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 195 states. [2020-07-10 15:01:27,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 195 states to 195 states and 259 transitions. [2020-07-10 15:01:27,739 INFO L78 Accepts]: Start accepts. Automaton has 195 states and 259 transitions. Word has length 26 [2020-07-10 15:01:27,740 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:01:27,740 INFO L479 AbstractCegarLoop]: Abstraction has 195 states and 259 transitions. [2020-07-10 15:01:27,740 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-10 15:01:27,740 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 259 transitions. [2020-07-10 15:01:27,741 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2020-07-10 15:01:27,741 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:01:27,741 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:01:27,742 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-10 15:01:27,742 INFO L427 AbstractCegarLoop]: === Iteration 3 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:01:27,742 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:01:27,742 INFO L82 PathProgramCache]: Analyzing trace with hash 1029098174, now seen corresponding path program 1 times [2020-07-10 15:01:27,743 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:01:27,743 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [138114435] [2020-07-10 15:01:27,743 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:01:27,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:27,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:27,886 INFO L280 TraceCheckUtils]: 0: Hoare triple {2194#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {2182#true} is VALID [2020-07-10 15:01:27,887 INFO L280 TraceCheckUtils]: 1: Hoare triple {2182#true} assume true; {2182#true} is VALID [2020-07-10 15:01:27,887 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {2182#true} {2182#true} #460#return; {2182#true} is VALID [2020-07-10 15:01:27,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:27,945 INFO L280 TraceCheckUtils]: 0: Hoare triple {2195#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2182#true} is VALID [2020-07-10 15:01:27,945 INFO L280 TraceCheckUtils]: 1: Hoare triple {2182#true} assume true; {2182#true} is VALID [2020-07-10 15:01:27,946 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {2182#true} {2182#true} #440#return; {2182#true} is VALID [2020-07-10 15:01:27,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:28,006 INFO L280 TraceCheckUtils]: 0: Hoare triple {2196#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2193#(= 0 ~compRegistered~0)} is VALID [2020-07-10 15:01:28,007 INFO L280 TraceCheckUtils]: 1: Hoare triple {2193#(= 0 ~compRegistered~0)} assume true; {2193#(= 0 ~compRegistered~0)} is VALID [2020-07-10 15:01:28,007 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {2193#(= 0 ~compRegistered~0)} {2182#true} #442#return; {2193#(= 0 ~compRegistered~0)} is VALID [2020-07-10 15:01:28,009 INFO L263 TraceCheckUtils]: 0: Hoare triple {2182#true} call ULTIMATE.init(); {2194#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:28,010 INFO L280 TraceCheckUtils]: 1: Hoare triple {2194#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {2182#true} is VALID [2020-07-10 15:01:28,010 INFO L280 TraceCheckUtils]: 2: Hoare triple {2182#true} assume true; {2182#true} is VALID [2020-07-10 15:01:28,010 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {2182#true} {2182#true} #460#return; {2182#true} is VALID [2020-07-10 15:01:28,010 INFO L263 TraceCheckUtils]: 4: Hoare triple {2182#true} call #t~ret31 := main(); {2182#true} is VALID [2020-07-10 15:01:28,011 INFO L280 TraceCheckUtils]: 5: Hoare triple {2182#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {2182#true} is VALID [2020-07-10 15:01:28,012 INFO L263 TraceCheckUtils]: 6: Hoare triple {2182#true} call _BLAST_init(); {2195#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:28,013 INFO L280 TraceCheckUtils]: 7: Hoare triple {2195#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2182#true} is VALID [2020-07-10 15:01:28,013 INFO L280 TraceCheckUtils]: 8: Hoare triple {2182#true} assume true; {2182#true} is VALID [2020-07-10 15:01:28,013 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {2182#true} {2182#true} #440#return; {2182#true} is VALID [2020-07-10 15:01:28,014 INFO L280 TraceCheckUtils]: 10: Hoare triple {2182#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {2182#true} is VALID [2020-07-10 15:01:28,014 INFO L280 TraceCheckUtils]: 11: Hoare triple {2182#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {2182#true} is VALID [2020-07-10 15:01:28,015 INFO L263 TraceCheckUtils]: 12: Hoare triple {2182#true} call stub_driver_init(); {2196#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:28,016 INFO L280 TraceCheckUtils]: 13: Hoare triple {2196#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2193#(= 0 ~compRegistered~0)} is VALID [2020-07-10 15:01:28,016 INFO L280 TraceCheckUtils]: 14: Hoare triple {2193#(= 0 ~compRegistered~0)} assume true; {2193#(= 0 ~compRegistered~0)} is VALID [2020-07-10 15:01:28,017 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {2193#(= 0 ~compRegistered~0)} {2182#true} #442#return; {2193#(= 0 ~compRegistered~0)} is VALID [2020-07-10 15:01:28,018 INFO L280 TraceCheckUtils]: 16: Hoare triple {2193#(= 0 ~compRegistered~0)} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {2193#(= 0 ~compRegistered~0)} is VALID [2020-07-10 15:01:28,018 INFO L280 TraceCheckUtils]: 17: Hoare triple {2193#(= 0 ~compRegistered~0)} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {2193#(= 0 ~compRegistered~0)} is VALID [2020-07-10 15:01:28,019 INFO L280 TraceCheckUtils]: 18: Hoare triple {2193#(= 0 ~compRegistered~0)} assume 3 == ~tmp_ndt_1~0; {2193#(= 0 ~compRegistered~0)} is VALID [2020-07-10 15:01:28,020 INFO L263 TraceCheckUtils]: 19: Hoare triple {2193#(= 0 ~compRegistered~0)} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {2193#(= 0 ~compRegistered~0)} is VALID [2020-07-10 15:01:28,021 INFO L280 TraceCheckUtils]: 20: Hoare triple {2193#(= 0 ~compRegistered~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {2193#(= 0 ~compRegistered~0)} is VALID [2020-07-10 15:01:28,021 INFO L280 TraceCheckUtils]: 21: Hoare triple {2193#(= 0 ~compRegistered~0)} assume 0 == ~irpStack__MinorFunction~0; {2193#(= 0 ~compRegistered~0)} is VALID [2020-07-10 15:01:28,022 INFO L280 TraceCheckUtils]: 22: Hoare triple {2193#(= 0 ~compRegistered~0)} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {2193#(= 0 ~compRegistered~0)} is VALID [2020-07-10 15:01:28,023 INFO L280 TraceCheckUtils]: 23: Hoare triple {2193#(= 0 ~compRegistered~0)} assume !(~s~0 != ~NP~0); {2193#(= 0 ~compRegistered~0)} is VALID [2020-07-10 15:01:28,023 INFO L280 TraceCheckUtils]: 24: Hoare triple {2193#(= 0 ~compRegistered~0)} assume 0 != ~compRegistered~0; {2183#false} is VALID [2020-07-10 15:01:28,023 INFO L263 TraceCheckUtils]: 25: Hoare triple {2183#false} call errorFn(); {2183#false} is VALID [2020-07-10 15:01:28,024 INFO L280 TraceCheckUtils]: 26: Hoare triple {2183#false} assume !false; {2183#false} is VALID [2020-07-10 15:01:28,026 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:01:28,027 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [138114435] [2020-07-10 15:01:28,027 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:01:28,027 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-10 15:01:28,028 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [172525586] [2020-07-10 15:01:28,028 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 27 [2020-07-10 15:01:28,029 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:01:28,029 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-10 15:01:28,064 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 27 edges. 27 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:28,064 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-10 15:01:28,064 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:01:28,065 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-10 15:01:28,065 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2020-07-10 15:01:28,065 INFO L87 Difference]: Start difference. First operand 195 states and 259 transitions. Second operand 6 states. [2020-07-10 15:01:30,136 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:30,136 INFO L93 Difference]: Finished difference Result 316 states and 413 transitions. [2020-07-10 15:01:30,136 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-10 15:01:30,137 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 27 [2020-07-10 15:01:30,137 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:01:30,137 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-10 15:01:30,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 334 transitions. [2020-07-10 15:01:30,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-10 15:01:30,148 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 334 transitions. [2020-07-10 15:01:30,148 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 334 transitions. [2020-07-10 15:01:30,638 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 334 edges. 334 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:30,647 INFO L225 Difference]: With dead ends: 316 [2020-07-10 15:01:30,648 INFO L226 Difference]: Without dead ends: 254 [2020-07-10 15:01:30,649 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2020-07-10 15:01:30,649 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2020-07-10 15:01:31,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 217. [2020-07-10 15:01:31,033 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:01:31,033 INFO L82 GeneralOperation]: Start isEquivalent. First operand 254 states. Second operand 217 states. [2020-07-10 15:01:31,033 INFO L74 IsIncluded]: Start isIncluded. First operand 254 states. Second operand 217 states. [2020-07-10 15:01:31,033 INFO L87 Difference]: Start difference. First operand 254 states. Second operand 217 states. [2020-07-10 15:01:31,044 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:31,045 INFO L93 Difference]: Finished difference Result 254 states and 335 transitions. [2020-07-10 15:01:31,045 INFO L276 IsEmpty]: Start isEmpty. Operand 254 states and 335 transitions. [2020-07-10 15:01:31,046 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:31,046 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:31,046 INFO L74 IsIncluded]: Start isIncluded. First operand 217 states. Second operand 254 states. [2020-07-10 15:01:31,047 INFO L87 Difference]: Start difference. First operand 217 states. Second operand 254 states. [2020-07-10 15:01:31,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:31,058 INFO L93 Difference]: Finished difference Result 254 states and 335 transitions. [2020-07-10 15:01:31,058 INFO L276 IsEmpty]: Start isEmpty. Operand 254 states and 335 transitions. [2020-07-10 15:01:31,059 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:31,060 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:31,060 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:01:31,060 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:01:31,060 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 217 states. [2020-07-10 15:01:31,069 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 217 states to 217 states and 289 transitions. [2020-07-10 15:01:31,069 INFO L78 Accepts]: Start accepts. Automaton has 217 states and 289 transitions. Word has length 27 [2020-07-10 15:01:31,070 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:01:31,070 INFO L479 AbstractCegarLoop]: Abstraction has 217 states and 289 transitions. [2020-07-10 15:01:31,070 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-10 15:01:31,070 INFO L276 IsEmpty]: Start isEmpty. Operand 217 states and 289 transitions. [2020-07-10 15:01:31,071 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2020-07-10 15:01:31,071 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:01:31,071 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:01:31,072 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-10 15:01:31,072 INFO L427 AbstractCegarLoop]: === Iteration 4 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:01:31,072 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:01:31,072 INFO L82 PathProgramCache]: Analyzing trace with hash 742933031, now seen corresponding path program 1 times [2020-07-10 15:01:31,072 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:01:31,073 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [522938351] [2020-07-10 15:01:31,073 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:01:31,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:31,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:31,216 INFO L280 TraceCheckUtils]: 0: Hoare triple {3437#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {3425#true} is VALID [2020-07-10 15:01:31,217 INFO L280 TraceCheckUtils]: 1: Hoare triple {3425#true} assume true; {3425#true} is VALID [2020-07-10 15:01:31,217 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {3425#true} {3425#true} #460#return; {3425#true} is VALID [2020-07-10 15:01:31,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:31,273 INFO L280 TraceCheckUtils]: 0: Hoare triple {3438#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {3425#true} is VALID [2020-07-10 15:01:31,273 INFO L280 TraceCheckUtils]: 1: Hoare triple {3425#true} assume true; {3425#true} is VALID [2020-07-10 15:01:31,274 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {3425#true} {3425#true} #440#return; {3425#true} is VALID [2020-07-10 15:01:31,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:31,311 INFO L280 TraceCheckUtils]: 0: Hoare triple {3439#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {3425#true} is VALID [2020-07-10 15:01:31,311 INFO L280 TraceCheckUtils]: 1: Hoare triple {3425#true} assume true; {3425#true} is VALID [2020-07-10 15:01:31,311 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {3425#true} {3425#true} #442#return; {3425#true} is VALID [2020-07-10 15:01:31,313 INFO L263 TraceCheckUtils]: 0: Hoare triple {3425#true} call ULTIMATE.init(); {3437#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:31,314 INFO L280 TraceCheckUtils]: 1: Hoare triple {3437#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {3425#true} is VALID [2020-07-10 15:01:31,314 INFO L280 TraceCheckUtils]: 2: Hoare triple {3425#true} assume true; {3425#true} is VALID [2020-07-10 15:01:31,314 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {3425#true} {3425#true} #460#return; {3425#true} is VALID [2020-07-10 15:01:31,315 INFO L263 TraceCheckUtils]: 4: Hoare triple {3425#true} call #t~ret31 := main(); {3425#true} is VALID [2020-07-10 15:01:31,315 INFO L280 TraceCheckUtils]: 5: Hoare triple {3425#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {3425#true} is VALID [2020-07-10 15:01:31,318 INFO L263 TraceCheckUtils]: 6: Hoare triple {3425#true} call _BLAST_init(); {3438#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:31,323 INFO L280 TraceCheckUtils]: 7: Hoare triple {3438#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {3425#true} is VALID [2020-07-10 15:01:31,323 INFO L280 TraceCheckUtils]: 8: Hoare triple {3425#true} assume true; {3425#true} is VALID [2020-07-10 15:01:31,323 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {3425#true} {3425#true} #440#return; {3425#true} is VALID [2020-07-10 15:01:31,324 INFO L280 TraceCheckUtils]: 10: Hoare triple {3425#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {3425#true} is VALID [2020-07-10 15:01:31,324 INFO L280 TraceCheckUtils]: 11: Hoare triple {3425#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {3425#true} is VALID [2020-07-10 15:01:31,331 INFO L263 TraceCheckUtils]: 12: Hoare triple {3425#true} call stub_driver_init(); {3439#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:31,332 INFO L280 TraceCheckUtils]: 13: Hoare triple {3439#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {3425#true} is VALID [2020-07-10 15:01:31,332 INFO L280 TraceCheckUtils]: 14: Hoare triple {3425#true} assume true; {3425#true} is VALID [2020-07-10 15:01:31,332 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {3425#true} {3425#true} #442#return; {3425#true} is VALID [2020-07-10 15:01:31,333 INFO L280 TraceCheckUtils]: 16: Hoare triple {3425#true} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {3425#true} is VALID [2020-07-10 15:01:31,333 INFO L280 TraceCheckUtils]: 17: Hoare triple {3425#true} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {3425#true} is VALID [2020-07-10 15:01:31,333 INFO L280 TraceCheckUtils]: 18: Hoare triple {3425#true} assume 3 == ~tmp_ndt_1~0; {3425#true} is VALID [2020-07-10 15:01:31,333 INFO L263 TraceCheckUtils]: 19: Hoare triple {3425#true} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {3425#true} is VALID [2020-07-10 15:01:31,334 INFO L280 TraceCheckUtils]: 20: Hoare triple {3425#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {3425#true} is VALID [2020-07-10 15:01:31,334 INFO L280 TraceCheckUtils]: 21: Hoare triple {3425#true} assume !(0 == ~irpStack__MinorFunction~0); {3425#true} is VALID [2020-07-10 15:01:31,338 INFO L280 TraceCheckUtils]: 22: Hoare triple {3425#true} assume 23 == ~irpStack__MinorFunction~0; {3425#true} is VALID [2020-07-10 15:01:31,339 INFO L280 TraceCheckUtils]: 23: Hoare triple {3425#true} ~devExt__SurpriseRemoved~0 := 1; {3425#true} is VALID [2020-07-10 15:01:31,351 INFO L280 TraceCheckUtils]: 24: Hoare triple {3425#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {3436#(= ~SKIP1~0 ~s~0)} is VALID [2020-07-10 15:01:31,356 INFO L280 TraceCheckUtils]: 25: Hoare triple {3436#(= ~SKIP1~0 ~s~0)} #t~post10 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post10;havoc #t~post10;#t~post11 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post11;havoc #t~post11; {3436#(= ~SKIP1~0 ~s~0)} is VALID [2020-07-10 15:01:31,365 INFO L263 TraceCheckUtils]: 26: Hoare triple {3436#(= ~SKIP1~0 ~s~0)} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {3436#(= ~SKIP1~0 ~s~0)} is VALID [2020-07-10 15:01:31,367 INFO L280 TraceCheckUtils]: 27: Hoare triple {3436#(= ~SKIP1~0 ~s~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {3436#(= ~SKIP1~0 ~s~0)} is VALID [2020-07-10 15:01:31,367 INFO L280 TraceCheckUtils]: 28: Hoare triple {3436#(= ~SKIP1~0 ~s~0)} assume !(0 != ~compRegistered~0); {3436#(= ~SKIP1~0 ~s~0)} is VALID [2020-07-10 15:01:31,368 INFO L280 TraceCheckUtils]: 29: Hoare triple {3436#(= ~SKIP1~0 ~s~0)} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {3436#(= ~SKIP1~0 ~s~0)} is VALID [2020-07-10 15:01:31,368 INFO L280 TraceCheckUtils]: 30: Hoare triple {3436#(= ~SKIP1~0 ~s~0)} assume 0 == ~tmp_ndt_2~0; {3436#(= ~SKIP1~0 ~s~0)} is VALID [2020-07-10 15:01:31,369 INFO L280 TraceCheckUtils]: 31: Hoare triple {3436#(= ~SKIP1~0 ~s~0)} ~returnVal2~0 := 0; {3436#(= ~SKIP1~0 ~s~0)} is VALID [2020-07-10 15:01:31,369 INFO L280 TraceCheckUtils]: 32: Hoare triple {3436#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~NP~0); {3436#(= ~SKIP1~0 ~s~0)} is VALID [2020-07-10 15:01:31,370 INFO L280 TraceCheckUtils]: 33: Hoare triple {3436#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~MPR1~0); {3436#(= ~SKIP1~0 ~s~0)} is VALID [2020-07-10 15:01:31,371 INFO L280 TraceCheckUtils]: 34: Hoare triple {3436#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~SKIP1~0); {3426#false} is VALID [2020-07-10 15:01:31,371 INFO L263 TraceCheckUtils]: 35: Hoare triple {3426#false} call errorFn(); {3426#false} is VALID [2020-07-10 15:01:31,371 INFO L280 TraceCheckUtils]: 36: Hoare triple {3426#false} assume !false; {3426#false} is VALID [2020-07-10 15:01:31,376 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:01:31,376 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [522938351] [2020-07-10 15:01:31,377 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:01:31,377 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-10 15:01:31,377 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1880376861] [2020-07-10 15:01:31,377 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 37 [2020-07-10 15:01:31,378 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:01:31,378 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-10 15:01:31,417 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 37 edges. 37 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:31,418 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-10 15:01:31,418 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:01:31,418 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-10 15:01:31,419 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2020-07-10 15:01:31,419 INFO L87 Difference]: Start difference. First operand 217 states and 289 transitions. Second operand 6 states. [2020-07-10 15:01:33,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:33,311 INFO L93 Difference]: Finished difference Result 220 states and 291 transitions. [2020-07-10 15:01:33,311 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-10 15:01:33,312 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 37 [2020-07-10 15:01:33,312 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:01:33,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-10 15:01:33,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 214 transitions. [2020-07-10 15:01:33,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-10 15:01:33,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 214 transitions. [2020-07-10 15:01:33,319 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 214 transitions. [2020-07-10 15:01:33,633 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 214 edges. 214 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:33,640 INFO L225 Difference]: With dead ends: 220 [2020-07-10 15:01:33,640 INFO L226 Difference]: Without dead ends: 217 [2020-07-10 15:01:33,640 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2020-07-10 15:01:33,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 217 states. [2020-07-10 15:01:34,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 217 to 217. [2020-07-10 15:01:34,032 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:01:34,032 INFO L82 GeneralOperation]: Start isEquivalent. First operand 217 states. Second operand 217 states. [2020-07-10 15:01:34,032 INFO L74 IsIncluded]: Start isIncluded. First operand 217 states. Second operand 217 states. [2020-07-10 15:01:34,032 INFO L87 Difference]: Start difference. First operand 217 states. Second operand 217 states. [2020-07-10 15:01:34,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:34,042 INFO L93 Difference]: Finished difference Result 217 states and 288 transitions. [2020-07-10 15:01:34,042 INFO L276 IsEmpty]: Start isEmpty. Operand 217 states and 288 transitions. [2020-07-10 15:01:34,043 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:34,043 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:34,043 INFO L74 IsIncluded]: Start isIncluded. First operand 217 states. Second operand 217 states. [2020-07-10 15:01:34,043 INFO L87 Difference]: Start difference. First operand 217 states. Second operand 217 states. [2020-07-10 15:01:34,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:34,053 INFO L93 Difference]: Finished difference Result 217 states and 288 transitions. [2020-07-10 15:01:34,053 INFO L276 IsEmpty]: Start isEmpty. Operand 217 states and 288 transitions. [2020-07-10 15:01:34,054 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:34,054 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:34,054 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:01:34,054 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:01:34,055 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 217 states. [2020-07-10 15:01:34,064 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 217 states to 217 states and 288 transitions. [2020-07-10 15:01:34,064 INFO L78 Accepts]: Start accepts. Automaton has 217 states and 288 transitions. Word has length 37 [2020-07-10 15:01:34,064 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:01:34,064 INFO L479 AbstractCegarLoop]: Abstraction has 217 states and 288 transitions. [2020-07-10 15:01:34,065 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-10 15:01:34,065 INFO L276 IsEmpty]: Start isEmpty. Operand 217 states and 288 transitions. [2020-07-10 15:01:34,066 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2020-07-10 15:01:34,066 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:01:34,066 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:01:34,067 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-10 15:01:34,067 INFO L427 AbstractCegarLoop]: === Iteration 5 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:01:34,067 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:01:34,067 INFO L82 PathProgramCache]: Analyzing trace with hash 324263340, now seen corresponding path program 1 times [2020-07-10 15:01:34,067 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:01:34,068 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2143265759] [2020-07-10 15:01:34,068 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:01:34,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:34,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:34,193 INFO L280 TraceCheckUtils]: 0: Hoare triple {4485#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {4464#true} is VALID [2020-07-10 15:01:34,193 INFO L280 TraceCheckUtils]: 1: Hoare triple {4464#true} assume true; {4464#true} is VALID [2020-07-10 15:01:34,194 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {4464#true} {4464#true} #460#return; {4464#true} is VALID [2020-07-10 15:01:34,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:34,257 INFO L280 TraceCheckUtils]: 0: Hoare triple {4486#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4464#true} is VALID [2020-07-10 15:01:34,257 INFO L280 TraceCheckUtils]: 1: Hoare triple {4464#true} assume true; {4464#true} is VALID [2020-07-10 15:01:34,257 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {4464#true} {4464#true} #440#return; {4464#true} is VALID [2020-07-10 15:01:34,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:34,289 INFO L280 TraceCheckUtils]: 0: Hoare triple {4487#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4464#true} is VALID [2020-07-10 15:01:34,289 INFO L280 TraceCheckUtils]: 1: Hoare triple {4464#true} assume true; {4464#true} is VALID [2020-07-10 15:01:34,290 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {4464#true} {4464#true} #442#return; {4464#true} is VALID [2020-07-10 15:01:34,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:34,329 INFO L280 TraceCheckUtils]: 0: Hoare triple {4488#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {4464#true} is VALID [2020-07-10 15:01:34,332 INFO L280 TraceCheckUtils]: 1: Hoare triple {4464#true} assume !(0 != ~compRegistered~0); {4489#(<= ~compRegistered~0 0)} is VALID [2020-07-10 15:01:34,332 INFO L280 TraceCheckUtils]: 2: Hoare triple {4489#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {4489#(<= ~compRegistered~0 0)} is VALID [2020-07-10 15:01:34,333 INFO L280 TraceCheckUtils]: 3: Hoare triple {4489#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_2~0; {4489#(<= ~compRegistered~0 0)} is VALID [2020-07-10 15:01:34,333 INFO L280 TraceCheckUtils]: 4: Hoare triple {4489#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {4489#(<= ~compRegistered~0 0)} is VALID [2020-07-10 15:01:34,334 INFO L280 TraceCheckUtils]: 5: Hoare triple {4489#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {4489#(<= ~compRegistered~0 0)} is VALID [2020-07-10 15:01:34,334 INFO L280 TraceCheckUtils]: 6: Hoare triple {4489#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {4489#(<= ~compRegistered~0 0)} is VALID [2020-07-10 15:01:34,335 INFO L280 TraceCheckUtils]: 7: Hoare triple {4489#(<= ~compRegistered~0 0)} assume true; {4489#(<= ~compRegistered~0 0)} is VALID [2020-07-10 15:01:34,337 INFO L275 TraceCheckUtils]: 8: Hoare quadruple {4489#(<= ~compRegistered~0 0)} {4475#(<= 1 ~compRegistered~0)} #468#return; {4465#false} is VALID [2020-07-10 15:01:34,339 INFO L263 TraceCheckUtils]: 0: Hoare triple {4464#true} call ULTIMATE.init(); {4485#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:34,339 INFO L280 TraceCheckUtils]: 1: Hoare triple {4485#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {4464#true} is VALID [2020-07-10 15:01:34,339 INFO L280 TraceCheckUtils]: 2: Hoare triple {4464#true} assume true; {4464#true} is VALID [2020-07-10 15:01:34,340 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {4464#true} {4464#true} #460#return; {4464#true} is VALID [2020-07-10 15:01:34,340 INFO L263 TraceCheckUtils]: 4: Hoare triple {4464#true} call #t~ret31 := main(); {4464#true} is VALID [2020-07-10 15:01:34,340 INFO L280 TraceCheckUtils]: 5: Hoare triple {4464#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {4464#true} is VALID [2020-07-10 15:01:34,342 INFO L263 TraceCheckUtils]: 6: Hoare triple {4464#true} call _BLAST_init(); {4486#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:34,342 INFO L280 TraceCheckUtils]: 7: Hoare triple {4486#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4464#true} is VALID [2020-07-10 15:01:34,343 INFO L280 TraceCheckUtils]: 8: Hoare triple {4464#true} assume true; {4464#true} is VALID [2020-07-10 15:01:34,343 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {4464#true} {4464#true} #440#return; {4464#true} is VALID [2020-07-10 15:01:34,343 INFO L280 TraceCheckUtils]: 10: Hoare triple {4464#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {4464#true} is VALID [2020-07-10 15:01:34,343 INFO L280 TraceCheckUtils]: 11: Hoare triple {4464#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {4464#true} is VALID [2020-07-10 15:01:34,348 INFO L263 TraceCheckUtils]: 12: Hoare triple {4464#true} call stub_driver_init(); {4487#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:34,349 INFO L280 TraceCheckUtils]: 13: Hoare triple {4487#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4464#true} is VALID [2020-07-10 15:01:34,349 INFO L280 TraceCheckUtils]: 14: Hoare triple {4464#true} assume true; {4464#true} is VALID [2020-07-10 15:01:34,351 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {4464#true} {4464#true} #442#return; {4464#true} is VALID [2020-07-10 15:01:34,352 INFO L280 TraceCheckUtils]: 16: Hoare triple {4464#true} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {4464#true} is VALID [2020-07-10 15:01:34,352 INFO L280 TraceCheckUtils]: 17: Hoare triple {4464#true} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {4464#true} is VALID [2020-07-10 15:01:34,352 INFO L280 TraceCheckUtils]: 18: Hoare triple {4464#true} assume 3 == ~tmp_ndt_1~0; {4464#true} is VALID [2020-07-10 15:01:34,353 INFO L263 TraceCheckUtils]: 19: Hoare triple {4464#true} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {4464#true} is VALID [2020-07-10 15:01:34,353 INFO L280 TraceCheckUtils]: 20: Hoare triple {4464#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {4464#true} is VALID [2020-07-10 15:01:34,354 INFO L280 TraceCheckUtils]: 21: Hoare triple {4464#true} assume 0 == ~irpStack__MinorFunction~0; {4464#true} is VALID [2020-07-10 15:01:34,354 INFO L280 TraceCheckUtils]: 22: Hoare triple {4464#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {4464#true} is VALID [2020-07-10 15:01:34,356 INFO L280 TraceCheckUtils]: 23: Hoare triple {4464#true} assume !(~s~0 != ~NP~0); {4464#true} is VALID [2020-07-10 15:01:34,357 INFO L280 TraceCheckUtils]: 24: Hoare triple {4464#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {4475#(<= 1 ~compRegistered~0)} is VALID [2020-07-10 15:01:34,358 INFO L280 TraceCheckUtils]: 25: Hoare triple {4475#(<= 1 ~compRegistered~0)} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Control~0 := 224; {4475#(<= 1 ~compRegistered~0)} is VALID [2020-07-10 15:01:34,359 INFO L263 TraceCheckUtils]: 26: Hoare triple {4475#(<= 1 ~compRegistered~0)} call #t~ret8 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {4488#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:34,359 INFO L280 TraceCheckUtils]: 27: Hoare triple {4488#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {4464#true} is VALID [2020-07-10 15:01:34,360 INFO L280 TraceCheckUtils]: 28: Hoare triple {4464#true} assume !(0 != ~compRegistered~0); {4489#(<= ~compRegistered~0 0)} is VALID [2020-07-10 15:01:34,362 INFO L280 TraceCheckUtils]: 29: Hoare triple {4489#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {4489#(<= ~compRegistered~0 0)} is VALID [2020-07-10 15:01:34,386 INFO L280 TraceCheckUtils]: 30: Hoare triple {4489#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_2~0; {4489#(<= ~compRegistered~0 0)} is VALID [2020-07-10 15:01:34,392 INFO L280 TraceCheckUtils]: 31: Hoare triple {4489#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {4489#(<= ~compRegistered~0 0)} is VALID [2020-07-10 15:01:34,394 INFO L280 TraceCheckUtils]: 32: Hoare triple {4489#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {4489#(<= ~compRegistered~0 0)} is VALID [2020-07-10 15:01:34,395 INFO L280 TraceCheckUtils]: 33: Hoare triple {4489#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {4489#(<= ~compRegistered~0 0)} is VALID [2020-07-10 15:01:34,396 INFO L280 TraceCheckUtils]: 34: Hoare triple {4489#(<= ~compRegistered~0 0)} assume true; {4489#(<= ~compRegistered~0 0)} is VALID [2020-07-10 15:01:34,397 INFO L275 TraceCheckUtils]: 35: Hoare quadruple {4489#(<= ~compRegistered~0 0)} {4475#(<= 1 ~compRegistered~0)} #468#return; {4465#false} is VALID [2020-07-10 15:01:34,397 INFO L280 TraceCheckUtils]: 36: Hoare triple {4465#false} assume -2147483648 <= #t~ret8 && #t~ret8 <= 2147483647;~status~0 := #t~ret8;havoc #t~ret8;~__cil_tmp23~0 := ~status~0; {4465#false} is VALID [2020-07-10 15:01:34,398 INFO L280 TraceCheckUtils]: 37: Hoare triple {4465#false} assume 259 == ~__cil_tmp23~0; {4465#false} is VALID [2020-07-10 15:01:34,398 INFO L263 TraceCheckUtils]: 38: Hoare triple {4465#false} call #t~ret9 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {4465#false} is VALID [2020-07-10 15:01:34,399 INFO L280 TraceCheckUtils]: 39: Hoare triple {4465#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {4465#false} is VALID [2020-07-10 15:01:34,399 INFO L280 TraceCheckUtils]: 40: Hoare triple {4465#false} assume !(~s~0 == ~MPR3~0); {4465#false} is VALID [2020-07-10 15:01:34,400 INFO L280 TraceCheckUtils]: 41: Hoare triple {4465#false} assume !(1 == ~customIrp~0); {4465#false} is VALID [2020-07-10 15:01:34,400 INFO L280 TraceCheckUtils]: 42: Hoare triple {4465#false} assume ~s~0 == ~MPR3~0; {4465#false} is VALID [2020-07-10 15:01:34,400 INFO L263 TraceCheckUtils]: 43: Hoare triple {4465#false} call errorFn(); {4465#false} is VALID [2020-07-10 15:01:34,400 INFO L280 TraceCheckUtils]: 44: Hoare triple {4465#false} assume !false; {4465#false} is VALID [2020-07-10 15:01:34,406 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:01:34,407 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2143265759] [2020-07-10 15:01:34,407 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:01:34,407 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2020-07-10 15:01:34,407 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [704104152] [2020-07-10 15:01:34,412 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 45 [2020-07-10 15:01:34,412 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:01:34,413 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2020-07-10 15:01:34,457 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:34,457 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2020-07-10 15:01:34,458 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:01:34,458 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2020-07-10 15:01:34,458 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2020-07-10 15:01:34,458 INFO L87 Difference]: Start difference. First operand 217 states and 288 transitions. Second operand 8 states. [2020-07-10 15:01:37,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:37,021 INFO L93 Difference]: Finished difference Result 274 states and 356 transitions. [2020-07-10 15:01:37,022 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-10 15:01:37,022 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 45 [2020-07-10 15:01:37,022 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:01:37,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-10 15:01:37,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 292 transitions. [2020-07-10 15:01:37,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-10 15:01:37,032 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 292 transitions. [2020-07-10 15:01:37,032 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 292 transitions. [2020-07-10 15:01:37,463 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 292 edges. 292 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:37,468 INFO L225 Difference]: With dead ends: 274 [2020-07-10 15:01:37,469 INFO L226 Difference]: Without dead ends: 208 [2020-07-10 15:01:37,469 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=38, Invalid=72, Unknown=0, NotChecked=0, Total=110 [2020-07-10 15:01:37,470 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 208 states. [2020-07-10 15:01:37,821 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 208 to 190. [2020-07-10 15:01:37,821 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:01:37,821 INFO L82 GeneralOperation]: Start isEquivalent. First operand 208 states. Second operand 190 states. [2020-07-10 15:01:37,821 INFO L74 IsIncluded]: Start isIncluded. First operand 208 states. Second operand 190 states. [2020-07-10 15:01:37,822 INFO L87 Difference]: Start difference. First operand 208 states. Second operand 190 states. [2020-07-10 15:01:37,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:37,831 INFO L93 Difference]: Finished difference Result 208 states and 271 transitions. [2020-07-10 15:01:37,831 INFO L276 IsEmpty]: Start isEmpty. Operand 208 states and 271 transitions. [2020-07-10 15:01:37,832 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:37,832 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:37,832 INFO L74 IsIncluded]: Start isIncluded. First operand 190 states. Second operand 208 states. [2020-07-10 15:01:37,833 INFO L87 Difference]: Start difference. First operand 190 states. Second operand 208 states. [2020-07-10 15:01:37,840 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:37,841 INFO L93 Difference]: Finished difference Result 208 states and 271 transitions. [2020-07-10 15:01:37,841 INFO L276 IsEmpty]: Start isEmpty. Operand 208 states and 271 transitions. [2020-07-10 15:01:37,842 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:37,842 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:37,842 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:01:37,842 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:01:37,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 190 states. [2020-07-10 15:01:37,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 190 states to 190 states and 250 transitions. [2020-07-10 15:01:37,848 INFO L78 Accepts]: Start accepts. Automaton has 190 states and 250 transitions. Word has length 45 [2020-07-10 15:01:37,849 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:01:37,849 INFO L479 AbstractCegarLoop]: Abstraction has 190 states and 250 transitions. [2020-07-10 15:01:37,849 INFO L480 AbstractCegarLoop]: Interpolant automaton has 8 states. [2020-07-10 15:01:37,849 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 250 transitions. [2020-07-10 15:01:37,850 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2020-07-10 15:01:37,850 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:01:37,850 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:01:37,851 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-10 15:01:37,851 INFO L427 AbstractCegarLoop]: === Iteration 6 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:01:37,851 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:01:37,851 INFO L82 PathProgramCache]: Analyzing trace with hash 726030577, now seen corresponding path program 1 times [2020-07-10 15:01:37,851 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:01:37,852 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [882840697] [2020-07-10 15:01:37,852 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:01:37,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:37,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:37,974 INFO L280 TraceCheckUtils]: 0: Hoare triple {5558#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {5535#true} is VALID [2020-07-10 15:01:37,975 INFO L280 TraceCheckUtils]: 1: Hoare triple {5535#true} assume true; {5535#true} is VALID [2020-07-10 15:01:37,975 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {5535#true} {5535#true} #460#return; {5535#true} is VALID [2020-07-10 15:01:38,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:38,037 INFO L280 TraceCheckUtils]: 0: Hoare triple {5559#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {5535#true} is VALID [2020-07-10 15:01:38,037 INFO L280 TraceCheckUtils]: 1: Hoare triple {5535#true} assume true; {5535#true} is VALID [2020-07-10 15:01:38,038 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {5535#true} {5535#true} #440#return; {5535#true} is VALID [2020-07-10 15:01:38,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:38,071 INFO L280 TraceCheckUtils]: 0: Hoare triple {5560#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {5535#true} is VALID [2020-07-10 15:01:38,072 INFO L280 TraceCheckUtils]: 1: Hoare triple {5535#true} assume true; {5535#true} is VALID [2020-07-10 15:01:38,072 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {5535#true} {5535#true} #442#return; {5535#true} is VALID [2020-07-10 15:01:38,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:38,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:38,093 INFO L280 TraceCheckUtils]: 0: Hoare triple {5561#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {5535#true} is VALID [2020-07-10 15:01:38,093 INFO L280 TraceCheckUtils]: 1: Hoare triple {5535#true} assume true; {5535#true} is VALID [2020-07-10 15:01:38,094 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {5535#true} {5535#true} #438#return; {5535#true} is VALID [2020-07-10 15:01:38,094 INFO L280 TraceCheckUtils]: 0: Hoare triple {5561#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {5535#true} is VALID [2020-07-10 15:01:38,096 INFO L263 TraceCheckUtils]: 1: Hoare triple {5535#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {5561#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:38,096 INFO L280 TraceCheckUtils]: 2: Hoare triple {5561#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {5535#true} is VALID [2020-07-10 15:01:38,096 INFO L280 TraceCheckUtils]: 3: Hoare triple {5535#true} assume true; {5535#true} is VALID [2020-07-10 15:01:38,097 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {5535#true} {5535#true} #438#return; {5535#true} is VALID [2020-07-10 15:01:38,097 INFO L280 TraceCheckUtils]: 5: Hoare triple {5535#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {5535#true} is VALID [2020-07-10 15:01:38,097 INFO L280 TraceCheckUtils]: 6: Hoare triple {5535#true} assume true; {5535#true} is VALID [2020-07-10 15:01:38,098 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {5535#true} {5535#true} #448#return; {5535#true} is VALID [2020-07-10 15:01:38,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:38,115 INFO L280 TraceCheckUtils]: 0: Hoare triple {5565#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {5557#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:38,116 INFO L280 TraceCheckUtils]: 1: Hoare triple {5557#(= ~MPR1~0 ~s~0)} assume true; {5557#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:38,117 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {5557#(= ~MPR1~0 ~s~0)} {5535#true} #450#return; {5557#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:38,119 INFO L263 TraceCheckUtils]: 0: Hoare triple {5535#true} call ULTIMATE.init(); {5558#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:38,120 INFO L280 TraceCheckUtils]: 1: Hoare triple {5558#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {5535#true} is VALID [2020-07-10 15:01:38,120 INFO L280 TraceCheckUtils]: 2: Hoare triple {5535#true} assume true; {5535#true} is VALID [2020-07-10 15:01:38,120 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {5535#true} {5535#true} #460#return; {5535#true} is VALID [2020-07-10 15:01:38,121 INFO L263 TraceCheckUtils]: 4: Hoare triple {5535#true} call #t~ret31 := main(); {5535#true} is VALID [2020-07-10 15:01:38,121 INFO L280 TraceCheckUtils]: 5: Hoare triple {5535#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {5535#true} is VALID [2020-07-10 15:01:38,123 INFO L263 TraceCheckUtils]: 6: Hoare triple {5535#true} call _BLAST_init(); {5559#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:38,123 INFO L280 TraceCheckUtils]: 7: Hoare triple {5559#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {5535#true} is VALID [2020-07-10 15:01:38,124 INFO L280 TraceCheckUtils]: 8: Hoare triple {5535#true} assume true; {5535#true} is VALID [2020-07-10 15:01:38,124 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {5535#true} {5535#true} #440#return; {5535#true} is VALID [2020-07-10 15:01:38,124 INFO L280 TraceCheckUtils]: 10: Hoare triple {5535#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {5535#true} is VALID [2020-07-10 15:01:38,125 INFO L280 TraceCheckUtils]: 11: Hoare triple {5535#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {5535#true} is VALID [2020-07-10 15:01:38,126 INFO L263 TraceCheckUtils]: 12: Hoare triple {5535#true} call stub_driver_init(); {5560#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:38,126 INFO L280 TraceCheckUtils]: 13: Hoare triple {5560#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {5535#true} is VALID [2020-07-10 15:01:38,127 INFO L280 TraceCheckUtils]: 14: Hoare triple {5535#true} assume true; {5535#true} is VALID [2020-07-10 15:01:38,127 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {5535#true} {5535#true} #442#return; {5535#true} is VALID [2020-07-10 15:01:38,127 INFO L280 TraceCheckUtils]: 16: Hoare triple {5535#true} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {5535#true} is VALID [2020-07-10 15:01:38,128 INFO L280 TraceCheckUtils]: 17: Hoare triple {5535#true} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {5535#true} is VALID [2020-07-10 15:01:38,128 INFO L280 TraceCheckUtils]: 18: Hoare triple {5535#true} assume 3 == ~tmp_ndt_1~0; {5535#true} is VALID [2020-07-10 15:01:38,128 INFO L263 TraceCheckUtils]: 19: Hoare triple {5535#true} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {5535#true} is VALID [2020-07-10 15:01:38,128 INFO L280 TraceCheckUtils]: 20: Hoare triple {5535#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {5535#true} is VALID [2020-07-10 15:01:38,129 INFO L280 TraceCheckUtils]: 21: Hoare triple {5535#true} assume 0 == ~irpStack__MinorFunction~0; {5535#true} is VALID [2020-07-10 15:01:38,129 INFO L280 TraceCheckUtils]: 22: Hoare triple {5535#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {5535#true} is VALID [2020-07-10 15:01:38,129 INFO L280 TraceCheckUtils]: 23: Hoare triple {5535#true} assume !(~s~0 != ~NP~0); {5535#true} is VALID [2020-07-10 15:01:38,129 INFO L280 TraceCheckUtils]: 24: Hoare triple {5535#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {5535#true} is VALID [2020-07-10 15:01:38,130 INFO L280 TraceCheckUtils]: 25: Hoare triple {5535#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Control~0 := 224; {5535#true} is VALID [2020-07-10 15:01:38,130 INFO L263 TraceCheckUtils]: 26: Hoare triple {5535#true} call #t~ret8 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {5535#true} is VALID [2020-07-10 15:01:38,130 INFO L280 TraceCheckUtils]: 27: Hoare triple {5535#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {5535#true} is VALID [2020-07-10 15:01:38,130 INFO L280 TraceCheckUtils]: 28: Hoare triple {5535#true} assume 0 != ~compRegistered~0; {5535#true} is VALID [2020-07-10 15:01:38,131 INFO L263 TraceCheckUtils]: 29: Hoare triple {5535#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {5561#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:38,132 INFO L280 TraceCheckUtils]: 30: Hoare triple {5561#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {5535#true} is VALID [2020-07-10 15:01:38,133 INFO L263 TraceCheckUtils]: 31: Hoare triple {5535#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {5561#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:38,133 INFO L280 TraceCheckUtils]: 32: Hoare triple {5561#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {5535#true} is VALID [2020-07-10 15:01:38,133 INFO L280 TraceCheckUtils]: 33: Hoare triple {5535#true} assume true; {5535#true} is VALID [2020-07-10 15:01:38,133 INFO L275 TraceCheckUtils]: 34: Hoare quadruple {5535#true} {5535#true} #438#return; {5535#true} is VALID [2020-07-10 15:01:38,134 INFO L280 TraceCheckUtils]: 35: Hoare triple {5535#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {5535#true} is VALID [2020-07-10 15:01:38,134 INFO L280 TraceCheckUtils]: 36: Hoare triple {5535#true} assume true; {5535#true} is VALID [2020-07-10 15:01:38,134 INFO L275 TraceCheckUtils]: 37: Hoare quadruple {5535#true} {5535#true} #448#return; {5535#true} is VALID [2020-07-10 15:01:38,134 INFO L280 TraceCheckUtils]: 38: Hoare triple {5535#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {5535#true} is VALID [2020-07-10 15:01:38,135 INFO L263 TraceCheckUtils]: 39: Hoare triple {5535#true} call stubMoreProcessingRequired(); {5565#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:38,136 INFO L280 TraceCheckUtils]: 40: Hoare triple {5565#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {5557#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:38,137 INFO L280 TraceCheckUtils]: 41: Hoare triple {5557#(= ~MPR1~0 ~s~0)} assume true; {5557#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:38,137 INFO L275 TraceCheckUtils]: 42: Hoare quadruple {5557#(= ~MPR1~0 ~s~0)} {5535#true} #450#return; {5557#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:38,138 INFO L280 TraceCheckUtils]: 43: Hoare triple {5557#(= ~MPR1~0 ~s~0)} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {5557#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:38,139 INFO L280 TraceCheckUtils]: 44: Hoare triple {5557#(= ~MPR1~0 ~s~0)} assume 0 == ~tmp_ndt_2~0; {5557#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:38,140 INFO L280 TraceCheckUtils]: 45: Hoare triple {5557#(= ~MPR1~0 ~s~0)} ~returnVal2~0 := 0; {5557#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:38,140 INFO L280 TraceCheckUtils]: 46: Hoare triple {5557#(= ~MPR1~0 ~s~0)} assume !(~s~0 == ~NP~0); {5557#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:38,141 INFO L280 TraceCheckUtils]: 47: Hoare triple {5557#(= ~MPR1~0 ~s~0)} assume !(~s~0 == ~MPR1~0); {5536#false} is VALID [2020-07-10 15:01:38,141 INFO L280 TraceCheckUtils]: 48: Hoare triple {5536#false} assume !(~s~0 == ~SKIP1~0); {5536#false} is VALID [2020-07-10 15:01:38,142 INFO L263 TraceCheckUtils]: 49: Hoare triple {5536#false} call errorFn(); {5536#false} is VALID [2020-07-10 15:01:38,142 INFO L280 TraceCheckUtils]: 50: Hoare triple {5536#false} assume !false; {5536#false} is VALID [2020-07-10 15:01:38,147 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:01:38,148 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [882840697] [2020-07-10 15:01:38,148 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:01:38,148 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2020-07-10 15:01:38,149 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1854187464] [2020-07-10 15:01:38,149 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 51 [2020-07-10 15:01:38,150 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:01:38,150 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2020-07-10 15:01:38,207 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:38,207 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2020-07-10 15:01:38,207 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:01:38,208 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2020-07-10 15:01:38,208 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-10 15:01:38,208 INFO L87 Difference]: Start difference. First operand 190 states and 250 transitions. Second operand 8 states. [2020-07-10 15:01:40,419 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:40,419 INFO L93 Difference]: Finished difference Result 258 states and 336 transitions. [2020-07-10 15:01:40,420 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-10 15:01:40,420 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 51 [2020-07-10 15:01:40,420 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:01:40,420 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-10 15:01:40,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 270 transitions. [2020-07-10 15:01:40,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-10 15:01:40,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 270 transitions. [2020-07-10 15:01:40,426 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 270 transitions. [2020-07-10 15:01:40,786 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 270 edges. 270 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:40,792 INFO L225 Difference]: With dead ends: 258 [2020-07-10 15:01:40,793 INFO L226 Difference]: Without dead ends: 197 [2020-07-10 15:01:40,793 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=43, Invalid=67, Unknown=0, NotChecked=0, Total=110 [2020-07-10 15:01:40,794 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2020-07-10 15:01:41,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 188. [2020-07-10 15:01:41,109 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:01:41,109 INFO L82 GeneralOperation]: Start isEquivalent. First operand 197 states. Second operand 188 states. [2020-07-10 15:01:41,109 INFO L74 IsIncluded]: Start isIncluded. First operand 197 states. Second operand 188 states. [2020-07-10 15:01:41,109 INFO L87 Difference]: Start difference. First operand 197 states. Second operand 188 states. [2020-07-10 15:01:41,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:41,116 INFO L93 Difference]: Finished difference Result 197 states and 257 transitions. [2020-07-10 15:01:41,116 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 257 transitions. [2020-07-10 15:01:41,117 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:41,117 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:41,117 INFO L74 IsIncluded]: Start isIncluded. First operand 188 states. Second operand 197 states. [2020-07-10 15:01:41,117 INFO L87 Difference]: Start difference. First operand 188 states. Second operand 197 states. [2020-07-10 15:01:41,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:41,123 INFO L93 Difference]: Finished difference Result 197 states and 257 transitions. [2020-07-10 15:01:41,124 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 257 transitions. [2020-07-10 15:01:41,124 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:41,125 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:41,125 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:01:41,125 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:01:41,125 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 188 states. [2020-07-10 15:01:41,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 246 transitions. [2020-07-10 15:01:41,130 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 246 transitions. Word has length 51 [2020-07-10 15:01:41,131 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:01:41,131 INFO L479 AbstractCegarLoop]: Abstraction has 188 states and 246 transitions. [2020-07-10 15:01:41,131 INFO L480 AbstractCegarLoop]: Interpolant automaton has 8 states. [2020-07-10 15:01:41,131 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 246 transitions. [2020-07-10 15:01:41,132 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2020-07-10 15:01:41,132 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:01:41,132 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:01:41,133 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-10 15:01:41,133 INFO L427 AbstractCegarLoop]: === Iteration 7 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:01:41,133 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:01:41,133 INFO L82 PathProgramCache]: Analyzing trace with hash 572107035, now seen corresponding path program 1 times [2020-07-10 15:01:41,134 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:01:41,134 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1902838325] [2020-07-10 15:01:41,134 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:01:41,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:41,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:41,281 INFO L280 TraceCheckUtils]: 0: Hoare triple {6594#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6561#true} is VALID [2020-07-10 15:01:41,281 INFO L280 TraceCheckUtils]: 1: Hoare triple {6561#true} assume true; {6561#true} is VALID [2020-07-10 15:01:41,282 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {6561#true} {6561#true} #460#return; {6561#true} is VALID [2020-07-10 15:01:41,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:41,339 INFO L280 TraceCheckUtils]: 0: Hoare triple {6595#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} is VALID [2020-07-10 15:01:41,340 INFO L280 TraceCheckUtils]: 1: Hoare triple {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} assume true; {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} is VALID [2020-07-10 15:01:41,340 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} {6561#true} #440#return; {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} is VALID [2020-07-10 15:01:41,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:41,371 INFO L280 TraceCheckUtils]: 0: Hoare triple {6596#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6561#true} is VALID [2020-07-10 15:01:41,371 INFO L280 TraceCheckUtils]: 1: Hoare triple {6561#true} assume true; {6561#true} is VALID [2020-07-10 15:01:41,372 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {6561#true} {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} #442#return; {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} is VALID [2020-07-10 15:01:41,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:41,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:41,451 INFO L280 TraceCheckUtils]: 0: Hoare triple {6608#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {6561#true} is VALID [2020-07-10 15:01:41,451 INFO L280 TraceCheckUtils]: 1: Hoare triple {6561#true} assume !(0 != ~compRegistered~0); {6561#true} is VALID [2020-07-10 15:01:41,452 INFO L280 TraceCheckUtils]: 2: Hoare triple {6561#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {6561#true} is VALID [2020-07-10 15:01:41,452 INFO L280 TraceCheckUtils]: 3: Hoare triple {6561#true} assume 0 == ~tmp_ndt_2~0; {6561#true} is VALID [2020-07-10 15:01:41,452 INFO L280 TraceCheckUtils]: 4: Hoare triple {6561#true} ~returnVal2~0 := 0; {6561#true} is VALID [2020-07-10 15:01:41,453 INFO L280 TraceCheckUtils]: 5: Hoare triple {6561#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,453 INFO L280 TraceCheckUtils]: 6: Hoare triple {6607#(<= ~IPC~0 ~s~0)} #res := ~returnVal2~0; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,454 INFO L280 TraceCheckUtils]: 7: Hoare triple {6607#(<= ~IPC~0 ~s~0)} assume true; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,455 INFO L275 TraceCheckUtils]: 8: Hoare quadruple {6607#(<= ~IPC~0 ~s~0)} {6561#true} #476#return; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,455 INFO L280 TraceCheckUtils]: 0: Hoare triple {6597#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~s~0 |old(~s~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {6561#true} is VALID [2020-07-10 15:01:41,455 INFO L280 TraceCheckUtils]: 1: Hoare triple {6561#true} assume !(0 == ~irpStack__MinorFunction~0); {6561#true} is VALID [2020-07-10 15:01:41,455 INFO L280 TraceCheckUtils]: 2: Hoare triple {6561#true} assume 23 == ~irpStack__MinorFunction~0; {6561#true} is VALID [2020-07-10 15:01:41,456 INFO L280 TraceCheckUtils]: 3: Hoare triple {6561#true} ~devExt__SurpriseRemoved~0 := 1; {6561#true} is VALID [2020-07-10 15:01:41,456 INFO L280 TraceCheckUtils]: 4: Hoare triple {6561#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {6561#true} is VALID [2020-07-10 15:01:41,456 INFO L280 TraceCheckUtils]: 5: Hoare triple {6561#true} #t~post10 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post10;havoc #t~post10;#t~post11 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post11;havoc #t~post11; {6561#true} is VALID [2020-07-10 15:01:41,457 INFO L263 TraceCheckUtils]: 6: Hoare triple {6561#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {6608#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:41,457 INFO L280 TraceCheckUtils]: 7: Hoare triple {6608#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {6561#true} is VALID [2020-07-10 15:01:41,458 INFO L280 TraceCheckUtils]: 8: Hoare triple {6561#true} assume !(0 != ~compRegistered~0); {6561#true} is VALID [2020-07-10 15:01:41,458 INFO L280 TraceCheckUtils]: 9: Hoare triple {6561#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {6561#true} is VALID [2020-07-10 15:01:41,458 INFO L280 TraceCheckUtils]: 10: Hoare triple {6561#true} assume 0 == ~tmp_ndt_2~0; {6561#true} is VALID [2020-07-10 15:01:41,458 INFO L280 TraceCheckUtils]: 11: Hoare triple {6561#true} ~returnVal2~0 := 0; {6561#true} is VALID [2020-07-10 15:01:41,459 INFO L280 TraceCheckUtils]: 12: Hoare triple {6561#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,460 INFO L280 TraceCheckUtils]: 13: Hoare triple {6607#(<= ~IPC~0 ~s~0)} #res := ~returnVal2~0; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,460 INFO L280 TraceCheckUtils]: 14: Hoare triple {6607#(<= ~IPC~0 ~s~0)} assume true; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,461 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {6607#(<= ~IPC~0 ~s~0)} {6561#true} #476#return; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,462 INFO L280 TraceCheckUtils]: 16: Hoare triple {6607#(<= ~IPC~0 ~s~0)} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,462 INFO L280 TraceCheckUtils]: 17: Hoare triple {6607#(<= ~IPC~0 ~s~0)} #res := ~status~0; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,463 INFO L280 TraceCheckUtils]: 18: Hoare triple {6607#(<= ~IPC~0 ~s~0)} assume true; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,465 INFO L275 TraceCheckUtils]: 19: Hoare quadruple {6607#(<= ~IPC~0 ~s~0)} {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} #444#return; {6593#(<= (+ ~SKIP2~0 3) ~s~0)} is VALID [2020-07-10 15:01:41,467 INFO L263 TraceCheckUtils]: 0: Hoare triple {6561#true} call ULTIMATE.init(); {6594#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:41,467 INFO L280 TraceCheckUtils]: 1: Hoare triple {6594#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6561#true} is VALID [2020-07-10 15:01:41,467 INFO L280 TraceCheckUtils]: 2: Hoare triple {6561#true} assume true; {6561#true} is VALID [2020-07-10 15:01:41,467 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {6561#true} {6561#true} #460#return; {6561#true} is VALID [2020-07-10 15:01:41,468 INFO L263 TraceCheckUtils]: 4: Hoare triple {6561#true} call #t~ret31 := main(); {6561#true} is VALID [2020-07-10 15:01:41,468 INFO L280 TraceCheckUtils]: 5: Hoare triple {6561#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {6561#true} is VALID [2020-07-10 15:01:41,470 INFO L263 TraceCheckUtils]: 6: Hoare triple {6561#true} call _BLAST_init(); {6595#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:41,471 INFO L280 TraceCheckUtils]: 7: Hoare triple {6595#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} is VALID [2020-07-10 15:01:41,471 INFO L280 TraceCheckUtils]: 8: Hoare triple {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} assume true; {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} is VALID [2020-07-10 15:01:41,472 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} {6561#true} #440#return; {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} is VALID [2020-07-10 15:01:41,473 INFO L280 TraceCheckUtils]: 10: Hoare triple {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} is VALID [2020-07-10 15:01:41,473 INFO L280 TraceCheckUtils]: 11: Hoare triple {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} is VALID [2020-07-10 15:01:41,474 INFO L263 TraceCheckUtils]: 12: Hoare triple {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} call stub_driver_init(); {6596#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:41,474 INFO L280 TraceCheckUtils]: 13: Hoare triple {6596#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6561#true} is VALID [2020-07-10 15:01:41,475 INFO L280 TraceCheckUtils]: 14: Hoare triple {6561#true} assume true; {6561#true} is VALID [2020-07-10 15:01:41,475 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {6561#true} {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} #442#return; {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} is VALID [2020-07-10 15:01:41,476 INFO L280 TraceCheckUtils]: 16: Hoare triple {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} is VALID [2020-07-10 15:01:41,476 INFO L280 TraceCheckUtils]: 17: Hoare triple {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} is VALID [2020-07-10 15:01:41,477 INFO L280 TraceCheckUtils]: 18: Hoare triple {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} assume 3 == ~tmp_ndt_1~0; {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} is VALID [2020-07-10 15:01:41,478 INFO L263 TraceCheckUtils]: 19: Hoare triple {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {6597#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~s~0 |old(~s~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:41,479 INFO L280 TraceCheckUtils]: 20: Hoare triple {6597#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~s~0 |old(~s~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {6561#true} is VALID [2020-07-10 15:01:41,479 INFO L280 TraceCheckUtils]: 21: Hoare triple {6561#true} assume !(0 == ~irpStack__MinorFunction~0); {6561#true} is VALID [2020-07-10 15:01:41,479 INFO L280 TraceCheckUtils]: 22: Hoare triple {6561#true} assume 23 == ~irpStack__MinorFunction~0; {6561#true} is VALID [2020-07-10 15:01:41,479 INFO L280 TraceCheckUtils]: 23: Hoare triple {6561#true} ~devExt__SurpriseRemoved~0 := 1; {6561#true} is VALID [2020-07-10 15:01:41,480 INFO L280 TraceCheckUtils]: 24: Hoare triple {6561#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {6561#true} is VALID [2020-07-10 15:01:41,480 INFO L280 TraceCheckUtils]: 25: Hoare triple {6561#true} #t~post10 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post10;havoc #t~post10;#t~post11 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post11;havoc #t~post11; {6561#true} is VALID [2020-07-10 15:01:41,481 INFO L263 TraceCheckUtils]: 26: Hoare triple {6561#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {6608#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:41,481 INFO L280 TraceCheckUtils]: 27: Hoare triple {6608#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {6561#true} is VALID [2020-07-10 15:01:41,481 INFO L280 TraceCheckUtils]: 28: Hoare triple {6561#true} assume !(0 != ~compRegistered~0); {6561#true} is VALID [2020-07-10 15:01:41,481 INFO L280 TraceCheckUtils]: 29: Hoare triple {6561#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {6561#true} is VALID [2020-07-10 15:01:41,482 INFO L280 TraceCheckUtils]: 30: Hoare triple {6561#true} assume 0 == ~tmp_ndt_2~0; {6561#true} is VALID [2020-07-10 15:01:41,482 INFO L280 TraceCheckUtils]: 31: Hoare triple {6561#true} ~returnVal2~0 := 0; {6561#true} is VALID [2020-07-10 15:01:41,482 INFO L280 TraceCheckUtils]: 32: Hoare triple {6561#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,483 INFO L280 TraceCheckUtils]: 33: Hoare triple {6607#(<= ~IPC~0 ~s~0)} #res := ~returnVal2~0; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,484 INFO L280 TraceCheckUtils]: 34: Hoare triple {6607#(<= ~IPC~0 ~s~0)} assume true; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,485 INFO L275 TraceCheckUtils]: 35: Hoare quadruple {6607#(<= ~IPC~0 ~s~0)} {6561#true} #476#return; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,485 INFO L280 TraceCheckUtils]: 36: Hoare triple {6607#(<= ~IPC~0 ~s~0)} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,486 INFO L280 TraceCheckUtils]: 37: Hoare triple {6607#(<= ~IPC~0 ~s~0)} #res := ~status~0; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,486 INFO L280 TraceCheckUtils]: 38: Hoare triple {6607#(<= ~IPC~0 ~s~0)} assume true; {6607#(<= ~IPC~0 ~s~0)} is VALID [2020-07-10 15:01:41,488 INFO L275 TraceCheckUtils]: 39: Hoare quadruple {6607#(<= ~IPC~0 ~s~0)} {6569#(<= (+ ~SKIP2~0 3) ~IPC~0)} #444#return; {6593#(<= (+ ~SKIP2~0 3) ~s~0)} is VALID [2020-07-10 15:01:41,488 INFO L280 TraceCheckUtils]: 40: Hoare triple {6593#(<= (+ ~SKIP2~0 3) ~s~0)} assume -2147483648 <= #t~ret23 && #t~ret23 <= 2147483647;~status~1 := #t~ret23;havoc #t~ret23; {6593#(<= (+ ~SKIP2~0 3) ~s~0)} is VALID [2020-07-10 15:01:41,489 INFO L280 TraceCheckUtils]: 41: Hoare triple {6593#(<= (+ ~SKIP2~0 3) ~s~0)} assume !(1 == ~pended~0); {6593#(<= (+ ~SKIP2~0 3) ~s~0)} is VALID [2020-07-10 15:01:41,489 INFO L280 TraceCheckUtils]: 42: Hoare triple {6593#(<= (+ ~SKIP2~0 3) ~s~0)} assume !(1 == ~pended~0); {6593#(<= (+ ~SKIP2~0 3) ~s~0)} is VALID [2020-07-10 15:01:41,490 INFO L280 TraceCheckUtils]: 43: Hoare triple {6593#(<= (+ ~SKIP2~0 3) ~s~0)} assume ~s~0 != ~UNLOADED~0; {6593#(<= (+ ~SKIP2~0 3) ~s~0)} is VALID [2020-07-10 15:01:41,491 INFO L280 TraceCheckUtils]: 44: Hoare triple {6593#(<= (+ ~SKIP2~0 3) ~s~0)} assume -1 != ~status~1; {6593#(<= (+ ~SKIP2~0 3) ~s~0)} is VALID [2020-07-10 15:01:41,491 INFO L280 TraceCheckUtils]: 45: Hoare triple {6593#(<= (+ ~SKIP2~0 3) ~s~0)} assume !(~s~0 != ~SKIP2~0); {6562#false} is VALID [2020-07-10 15:01:41,491 INFO L280 TraceCheckUtils]: 46: Hoare triple {6562#false} assume 1 == ~pended~0; {6562#false} is VALID [2020-07-10 15:01:41,492 INFO L280 TraceCheckUtils]: 47: Hoare triple {6562#false} assume 259 != ~status~1; {6562#false} is VALID [2020-07-10 15:01:41,492 INFO L263 TraceCheckUtils]: 48: Hoare triple {6562#false} call errorFn(); {6562#false} is VALID [2020-07-10 15:01:41,492 INFO L280 TraceCheckUtils]: 49: Hoare triple {6562#false} assume !false; {6562#false} is VALID [2020-07-10 15:01:41,497 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:01:41,497 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1902838325] [2020-07-10 15:01:41,498 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:01:41,498 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2020-07-10 15:01:41,498 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [503274127] [2020-07-10 15:01:41,499 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 50 [2020-07-10 15:01:41,499 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:01:41,499 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states. [2020-07-10 15:01:41,567 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:41,568 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2020-07-10 15:01:41,568 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:01:41,568 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2020-07-10 15:01:41,569 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2020-07-10 15:01:41,569 INFO L87 Difference]: Start difference. First operand 188 states and 246 transitions. Second operand 10 states. [2020-07-10 15:01:44,330 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:44,331 INFO L93 Difference]: Finished difference Result 243 states and 316 transitions. [2020-07-10 15:01:44,331 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2020-07-10 15:01:44,331 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 50 [2020-07-10 15:01:44,332 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:01:44,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2020-07-10 15:01:44,338 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 264 transitions. [2020-07-10 15:01:44,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2020-07-10 15:01:44,345 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 264 transitions. [2020-07-10 15:01:44,346 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 264 transitions. [2020-07-10 15:01:44,902 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 264 edges. 264 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:44,914 INFO L225 Difference]: With dead ends: 243 [2020-07-10 15:01:44,914 INFO L226 Difference]: Without dead ends: 238 [2020-07-10 15:01:44,916 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=65, Invalid=145, Unknown=0, NotChecked=0, Total=210 [2020-07-10 15:01:44,917 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 238 states. [2020-07-10 15:01:45,454 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 238 to 205. [2020-07-10 15:01:45,454 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:01:45,454 INFO L82 GeneralOperation]: Start isEquivalent. First operand 238 states. Second operand 205 states. [2020-07-10 15:01:45,454 INFO L74 IsIncluded]: Start isIncluded. First operand 238 states. Second operand 205 states. [2020-07-10 15:01:45,455 INFO L87 Difference]: Start difference. First operand 238 states. Second operand 205 states. [2020-07-10 15:01:45,470 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:45,471 INFO L93 Difference]: Finished difference Result 238 states and 311 transitions. [2020-07-10 15:01:45,471 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 311 transitions. [2020-07-10 15:01:45,474 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:45,474 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:45,474 INFO L74 IsIncluded]: Start isIncluded. First operand 205 states. Second operand 238 states. [2020-07-10 15:01:45,475 INFO L87 Difference]: Start difference. First operand 205 states. Second operand 238 states. [2020-07-10 15:01:45,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:45,487 INFO L93 Difference]: Finished difference Result 238 states and 311 transitions. [2020-07-10 15:01:45,487 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 311 transitions. [2020-07-10 15:01:45,490 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:45,490 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:45,490 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:01:45,491 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:01:45,491 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 205 states. [2020-07-10 15:01:45,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 205 states to 205 states and 267 transitions. [2020-07-10 15:01:45,501 INFO L78 Accepts]: Start accepts. Automaton has 205 states and 267 transitions. Word has length 50 [2020-07-10 15:01:45,502 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:01:45,502 INFO L479 AbstractCegarLoop]: Abstraction has 205 states and 267 transitions. [2020-07-10 15:01:45,502 INFO L480 AbstractCegarLoop]: Interpolant automaton has 10 states. [2020-07-10 15:01:45,502 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 267 transitions. [2020-07-10 15:01:45,506 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2020-07-10 15:01:45,506 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:01:45,507 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:01:45,507 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-10 15:01:45,508 INFO L427 AbstractCegarLoop]: === Iteration 8 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:01:45,508 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:01:45,508 INFO L82 PathProgramCache]: Analyzing trace with hash 176400751, now seen corresponding path program 1 times [2020-07-10 15:01:45,508 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:01:45,509 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [664304194] [2020-07-10 15:01:45,510 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:01:45,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:45,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:45,725 INFO L280 TraceCheckUtils]: 0: Hoare triple {7725#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {7692#true} is VALID [2020-07-10 15:01:45,725 INFO L280 TraceCheckUtils]: 1: Hoare triple {7692#true} assume true; {7692#true} is VALID [2020-07-10 15:01:45,725 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {7692#true} {7692#true} #460#return; {7692#true} is VALID [2020-07-10 15:01:45,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:45,791 INFO L280 TraceCheckUtils]: 0: Hoare triple {7726#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} is VALID [2020-07-10 15:01:45,792 INFO L280 TraceCheckUtils]: 1: Hoare triple {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} assume true; {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} is VALID [2020-07-10 15:01:45,792 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} {7692#true} #440#return; {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} is VALID [2020-07-10 15:01:45,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:45,856 INFO L280 TraceCheckUtils]: 0: Hoare triple {7727#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {7728#(<= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:45,857 INFO L280 TraceCheckUtils]: 1: Hoare triple {7728#(<= ~s~0 ~NP~0)} assume true; {7728#(<= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:45,859 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {7728#(<= ~s~0 ~NP~0)} {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} #442#return; {7704#(<= (+ ~s~0 2) ~SKIP1~0)} is VALID [2020-07-10 15:01:45,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:46,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:46,056 INFO L280 TraceCheckUtils]: 0: Hoare triple {7742#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,057 INFO L280 TraceCheckUtils]: 1: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,058 INFO L280 TraceCheckUtils]: 2: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,058 INFO L280 TraceCheckUtils]: 3: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_2~0; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,059 INFO L280 TraceCheckUtils]: 4: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} ~returnVal2~0 := 0; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,064 INFO L280 TraceCheckUtils]: 5: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {7743#(= ~NP~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,069 INFO L280 TraceCheckUtils]: 6: Hoare triple {7743#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal2~0; {7743#(= ~NP~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,073 INFO L280 TraceCheckUtils]: 7: Hoare triple {7743#(= ~NP~0 |old(~s~0)|)} assume true; {7743#(= ~NP~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,075 INFO L275 TraceCheckUtils]: 8: Hoare quadruple {7743#(= ~NP~0 |old(~s~0)|)} {7731#(and (= ~NP~0 |old(~s~0)|) (= ~SKIP1~0 ~s~0))} #476#return; {7741#(= ~SKIP1~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,077 INFO L280 TraceCheckUtils]: 0: Hoare triple {7729#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~s~0 |old(~s~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,078 INFO L280 TraceCheckUtils]: 1: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume !(0 == ~irpStack__MinorFunction~0); {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,078 INFO L280 TraceCheckUtils]: 2: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume 23 == ~irpStack__MinorFunction~0; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,079 INFO L280 TraceCheckUtils]: 3: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} ~devExt__SurpriseRemoved~0 := 1; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,080 INFO L280 TraceCheckUtils]: 4: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {7731#(and (= ~NP~0 |old(~s~0)|) (= ~SKIP1~0 ~s~0))} is VALID [2020-07-10 15:01:46,081 INFO L280 TraceCheckUtils]: 5: Hoare triple {7731#(and (= ~NP~0 |old(~s~0)|) (= ~SKIP1~0 ~s~0))} #t~post10 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post10;havoc #t~post10;#t~post11 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post11;havoc #t~post11; {7731#(and (= ~NP~0 |old(~s~0)|) (= ~SKIP1~0 ~s~0))} is VALID [2020-07-10 15:01:46,083 INFO L263 TraceCheckUtils]: 6: Hoare triple {7731#(and (= ~NP~0 |old(~s~0)|) (= ~SKIP1~0 ~s~0))} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {7742#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:46,084 INFO L280 TraceCheckUtils]: 7: Hoare triple {7742#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,085 INFO L280 TraceCheckUtils]: 8: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,086 INFO L280 TraceCheckUtils]: 9: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,086 INFO L280 TraceCheckUtils]: 10: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_2~0; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,087 INFO L280 TraceCheckUtils]: 11: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} ~returnVal2~0 := 0; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,088 INFO L280 TraceCheckUtils]: 12: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {7743#(= ~NP~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,089 INFO L280 TraceCheckUtils]: 13: Hoare triple {7743#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal2~0; {7743#(= ~NP~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,090 INFO L280 TraceCheckUtils]: 14: Hoare triple {7743#(= ~NP~0 |old(~s~0)|)} assume true; {7743#(= ~NP~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,091 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {7743#(= ~NP~0 |old(~s~0)|)} {7731#(and (= ~NP~0 |old(~s~0)|) (= ~SKIP1~0 ~s~0))} #476#return; {7741#(= ~SKIP1~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,092 INFO L280 TraceCheckUtils]: 16: Hoare triple {7741#(= ~SKIP1~0 |old(~s~0)|)} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12; {7741#(= ~SKIP1~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,093 INFO L280 TraceCheckUtils]: 17: Hoare triple {7741#(= ~SKIP1~0 |old(~s~0)|)} #res := ~status~0; {7741#(= ~SKIP1~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,094 INFO L280 TraceCheckUtils]: 18: Hoare triple {7741#(= ~SKIP1~0 |old(~s~0)|)} assume true; {7741#(= ~SKIP1~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,096 INFO L275 TraceCheckUtils]: 19: Hoare quadruple {7741#(= ~SKIP1~0 |old(~s~0)|)} {7704#(<= (+ ~s~0 2) ~SKIP1~0)} #444#return; {7693#false} is VALID [2020-07-10 15:01:46,100 INFO L263 TraceCheckUtils]: 0: Hoare triple {7692#true} call ULTIMATE.init(); {7725#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:46,101 INFO L280 TraceCheckUtils]: 1: Hoare triple {7725#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {7692#true} is VALID [2020-07-10 15:01:46,101 INFO L280 TraceCheckUtils]: 2: Hoare triple {7692#true} assume true; {7692#true} is VALID [2020-07-10 15:01:46,101 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {7692#true} {7692#true} #460#return; {7692#true} is VALID [2020-07-10 15:01:46,102 INFO L263 TraceCheckUtils]: 4: Hoare triple {7692#true} call #t~ret31 := main(); {7692#true} is VALID [2020-07-10 15:01:46,102 INFO L280 TraceCheckUtils]: 5: Hoare triple {7692#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {7692#true} is VALID [2020-07-10 15:01:46,104 INFO L263 TraceCheckUtils]: 6: Hoare triple {7692#true} call _BLAST_init(); {7726#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:46,105 INFO L280 TraceCheckUtils]: 7: Hoare triple {7726#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} is VALID [2020-07-10 15:01:46,106 INFO L280 TraceCheckUtils]: 8: Hoare triple {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} assume true; {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} is VALID [2020-07-10 15:01:46,107 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} {7692#true} #440#return; {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} is VALID [2020-07-10 15:01:46,116 INFO L280 TraceCheckUtils]: 10: Hoare triple {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} is VALID [2020-07-10 15:01:46,117 INFO L280 TraceCheckUtils]: 11: Hoare triple {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} is VALID [2020-07-10 15:01:46,118 INFO L263 TraceCheckUtils]: 12: Hoare triple {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} call stub_driver_init(); {7727#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:46,119 INFO L280 TraceCheckUtils]: 13: Hoare triple {7727#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {7728#(<= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:46,120 INFO L280 TraceCheckUtils]: 14: Hoare triple {7728#(<= ~s~0 ~NP~0)} assume true; {7728#(<= ~s~0 ~NP~0)} is VALID [2020-07-10 15:01:46,121 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {7728#(<= ~s~0 ~NP~0)} {7700#(<= (+ ~NP~0 2) ~SKIP1~0)} #442#return; {7704#(<= (+ ~s~0 2) ~SKIP1~0)} is VALID [2020-07-10 15:01:46,122 INFO L280 TraceCheckUtils]: 16: Hoare triple {7704#(<= (+ ~s~0 2) ~SKIP1~0)} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {7704#(<= (+ ~s~0 2) ~SKIP1~0)} is VALID [2020-07-10 15:01:46,123 INFO L280 TraceCheckUtils]: 17: Hoare triple {7704#(<= (+ ~s~0 2) ~SKIP1~0)} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {7704#(<= (+ ~s~0 2) ~SKIP1~0)} is VALID [2020-07-10 15:01:46,124 INFO L280 TraceCheckUtils]: 18: Hoare triple {7704#(<= (+ ~s~0 2) ~SKIP1~0)} assume 3 == ~tmp_ndt_1~0; {7704#(<= (+ ~s~0 2) ~SKIP1~0)} is VALID [2020-07-10 15:01:46,125 INFO L263 TraceCheckUtils]: 19: Hoare triple {7704#(<= (+ ~s~0 2) ~SKIP1~0)} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {7729#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~s~0 |old(~s~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:46,126 INFO L280 TraceCheckUtils]: 20: Hoare triple {7729#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~s~0 |old(~s~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,126 INFO L280 TraceCheckUtils]: 21: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume !(0 == ~irpStack__MinorFunction~0); {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,127 INFO L280 TraceCheckUtils]: 22: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume 23 == ~irpStack__MinorFunction~0; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,128 INFO L280 TraceCheckUtils]: 23: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} ~devExt__SurpriseRemoved~0 := 1; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,128 INFO L280 TraceCheckUtils]: 24: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {7731#(and (= ~NP~0 |old(~s~0)|) (= ~SKIP1~0 ~s~0))} is VALID [2020-07-10 15:01:46,129 INFO L280 TraceCheckUtils]: 25: Hoare triple {7731#(and (= ~NP~0 |old(~s~0)|) (= ~SKIP1~0 ~s~0))} #t~post10 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post10;havoc #t~post10;#t~post11 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post11;havoc #t~post11; {7731#(and (= ~NP~0 |old(~s~0)|) (= ~SKIP1~0 ~s~0))} is VALID [2020-07-10 15:01:46,131 INFO L263 TraceCheckUtils]: 26: Hoare triple {7731#(and (= ~NP~0 |old(~s~0)|) (= ~SKIP1~0 ~s~0))} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {7742#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:46,132 INFO L280 TraceCheckUtils]: 27: Hoare triple {7742#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,133 INFO L280 TraceCheckUtils]: 28: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,135 INFO L280 TraceCheckUtils]: 29: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,137 INFO L280 TraceCheckUtils]: 30: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_2~0; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,137 INFO L280 TraceCheckUtils]: 31: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} ~returnVal2~0 := 0; {7730#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,139 INFO L280 TraceCheckUtils]: 32: Hoare triple {7730#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {7743#(= ~NP~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,139 INFO L280 TraceCheckUtils]: 33: Hoare triple {7743#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal2~0; {7743#(= ~NP~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,141 INFO L280 TraceCheckUtils]: 34: Hoare triple {7743#(= ~NP~0 |old(~s~0)|)} assume true; {7743#(= ~NP~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,142 INFO L275 TraceCheckUtils]: 35: Hoare quadruple {7743#(= ~NP~0 |old(~s~0)|)} {7731#(and (= ~NP~0 |old(~s~0)|) (= ~SKIP1~0 ~s~0))} #476#return; {7741#(= ~SKIP1~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,143 INFO L280 TraceCheckUtils]: 36: Hoare triple {7741#(= ~SKIP1~0 |old(~s~0)|)} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12; {7741#(= ~SKIP1~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,144 INFO L280 TraceCheckUtils]: 37: Hoare triple {7741#(= ~SKIP1~0 |old(~s~0)|)} #res := ~status~0; {7741#(= ~SKIP1~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,144 INFO L280 TraceCheckUtils]: 38: Hoare triple {7741#(= ~SKIP1~0 |old(~s~0)|)} assume true; {7741#(= ~SKIP1~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:46,146 INFO L275 TraceCheckUtils]: 39: Hoare quadruple {7741#(= ~SKIP1~0 |old(~s~0)|)} {7704#(<= (+ ~s~0 2) ~SKIP1~0)} #444#return; {7693#false} is VALID [2020-07-10 15:01:46,146 INFO L280 TraceCheckUtils]: 40: Hoare triple {7693#false} assume -2147483648 <= #t~ret23 && #t~ret23 <= 2147483647;~status~1 := #t~ret23;havoc #t~ret23; {7693#false} is VALID [2020-07-10 15:01:46,147 INFO L280 TraceCheckUtils]: 41: Hoare triple {7693#false} assume !(1 == ~pended~0); {7693#false} is VALID [2020-07-10 15:01:46,147 INFO L280 TraceCheckUtils]: 42: Hoare triple {7693#false} assume !(1 == ~pended~0); {7693#false} is VALID [2020-07-10 15:01:46,147 INFO L280 TraceCheckUtils]: 43: Hoare triple {7693#false} assume ~s~0 != ~UNLOADED~0; {7693#false} is VALID [2020-07-10 15:01:46,148 INFO L280 TraceCheckUtils]: 44: Hoare triple {7693#false} assume -1 != ~status~1; {7693#false} is VALID [2020-07-10 15:01:46,148 INFO L280 TraceCheckUtils]: 45: Hoare triple {7693#false} assume ~s~0 != ~SKIP2~0; {7693#false} is VALID [2020-07-10 15:01:46,148 INFO L280 TraceCheckUtils]: 46: Hoare triple {7693#false} assume !(~s~0 != ~IPC~0); {7693#false} is VALID [2020-07-10 15:01:46,149 INFO L280 TraceCheckUtils]: 47: Hoare triple {7693#false} assume 1 == ~pended~0; {7693#false} is VALID [2020-07-10 15:01:46,149 INFO L280 TraceCheckUtils]: 48: Hoare triple {7693#false} assume 259 != ~status~1; {7693#false} is VALID [2020-07-10 15:01:46,149 INFO L263 TraceCheckUtils]: 49: Hoare triple {7693#false} call errorFn(); {7693#false} is VALID [2020-07-10 15:01:46,150 INFO L280 TraceCheckUtils]: 50: Hoare triple {7693#false} assume !false; {7693#false} is VALID [2020-07-10 15:01:46,159 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:01:46,159 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [664304194] [2020-07-10 15:01:46,160 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:01:46,160 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2020-07-10 15:01:46,160 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1370944406] [2020-07-10 15:01:46,161 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 51 [2020-07-10 15:01:46,162 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:01:46,162 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 14 states. [2020-07-10 15:01:46,244 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:46,244 INFO L459 AbstractCegarLoop]: Interpolant automaton has 14 states [2020-07-10 15:01:46,245 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:01:46,245 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2020-07-10 15:01:46,246 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=39, Invalid=143, Unknown=0, NotChecked=0, Total=182 [2020-07-10 15:01:46,246 INFO L87 Difference]: Start difference. First operand 205 states and 267 transitions. Second operand 14 states. [2020-07-10 15:01:46,886 WARN L193 SmtUtils]: Spent 108.00 ms on a formula simplification. DAG size of input: 61 DAG size of output: 59 [2020-07-10 15:01:47,384 WARN L193 SmtUtils]: Spent 114.00 ms on a formula simplification. DAG size of input: 62 DAG size of output: 59 [2020-07-10 15:01:51,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:51,828 INFO L93 Difference]: Finished difference Result 246 states and 313 transitions. [2020-07-10 15:01:51,828 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2020-07-10 15:01:51,829 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 51 [2020-07-10 15:01:51,829 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:01:51,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 14 states. [2020-07-10 15:01:51,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 313 transitions. [2020-07-10 15:01:51,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 14 states. [2020-07-10 15:01:51,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 313 transitions. [2020-07-10 15:01:51,837 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 18 states and 313 transitions. [2020-07-10 15:01:52,316 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 313 edges. 313 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:52,321 INFO L225 Difference]: With dead ends: 246 [2020-07-10 15:01:52,321 INFO L226 Difference]: Without dead ends: 222 [2020-07-10 15:01:52,322 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 91 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=160, Invalid=542, Unknown=0, NotChecked=0, Total=702 [2020-07-10 15:01:52,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2020-07-10 15:01:52,774 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 188. [2020-07-10 15:01:52,774 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:01:52,775 INFO L82 GeneralOperation]: Start isEquivalent. First operand 222 states. Second operand 188 states. [2020-07-10 15:01:52,775 INFO L74 IsIncluded]: Start isIncluded. First operand 222 states. Second operand 188 states. [2020-07-10 15:01:52,775 INFO L87 Difference]: Start difference. First operand 222 states. Second operand 188 states. [2020-07-10 15:01:52,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:52,783 INFO L93 Difference]: Finished difference Result 222 states and 284 transitions. [2020-07-10 15:01:52,783 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 284 transitions. [2020-07-10 15:01:52,785 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:52,786 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:52,786 INFO L74 IsIncluded]: Start isIncluded. First operand 188 states. Second operand 222 states. [2020-07-10 15:01:52,786 INFO L87 Difference]: Start difference. First operand 188 states. Second operand 222 states. [2020-07-10 15:01:52,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:52,792 INFO L93 Difference]: Finished difference Result 222 states and 284 transitions. [2020-07-10 15:01:52,792 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 284 transitions. [2020-07-10 15:01:52,793 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:52,793 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:52,793 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:01:52,793 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:01:52,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 188 states. [2020-07-10 15:01:52,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 244 transitions. [2020-07-10 15:01:52,799 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 244 transitions. Word has length 51 [2020-07-10 15:01:52,799 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:01:52,799 INFO L479 AbstractCegarLoop]: Abstraction has 188 states and 244 transitions. [2020-07-10 15:01:52,799 INFO L480 AbstractCegarLoop]: Interpolant automaton has 14 states. [2020-07-10 15:01:52,799 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 244 transitions. [2020-07-10 15:01:52,800 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2020-07-10 15:01:52,800 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:01:52,800 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:01:52,801 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-10 15:01:52,801 INFO L427 AbstractCegarLoop]: === Iteration 9 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:01:52,801 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:01:52,801 INFO L82 PathProgramCache]: Analyzing trace with hash 1461171158, now seen corresponding path program 1 times [2020-07-10 15:01:52,801 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:01:52,802 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807299788] [2020-07-10 15:01:52,802 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:01:52,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:52,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:52,907 INFO L280 TraceCheckUtils]: 0: Hoare triple {8827#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8793#true} is VALID [2020-07-10 15:01:52,908 INFO L280 TraceCheckUtils]: 1: Hoare triple {8793#true} assume true; {8793#true} is VALID [2020-07-10 15:01:52,908 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {8793#true} {8793#true} #460#return; {8793#true} is VALID [2020-07-10 15:01:52,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:52,956 INFO L280 TraceCheckUtils]: 0: Hoare triple {8828#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8793#true} is VALID [2020-07-10 15:01:52,956 INFO L280 TraceCheckUtils]: 1: Hoare triple {8793#true} assume true; {8793#true} is VALID [2020-07-10 15:01:52,956 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {8793#true} {8793#true} #440#return; {8793#true} is VALID [2020-07-10 15:01:52,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:52,987 INFO L280 TraceCheckUtils]: 0: Hoare triple {8829#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8793#true} is VALID [2020-07-10 15:01:52,988 INFO L280 TraceCheckUtils]: 1: Hoare triple {8793#true} assume true; {8793#true} is VALID [2020-07-10 15:01:52,988 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {8793#true} {8793#true} #442#return; {8793#true} is VALID [2020-07-10 15:01:53,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:53,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:53,044 INFO L280 TraceCheckUtils]: 0: Hoare triple {8842#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {8793#true} is VALID [2020-07-10 15:01:53,045 INFO L280 TraceCheckUtils]: 1: Hoare triple {8793#true} assume !(0 != ~compRegistered~0); {8793#true} is VALID [2020-07-10 15:01:53,045 INFO L280 TraceCheckUtils]: 2: Hoare triple {8793#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {8793#true} is VALID [2020-07-10 15:01:53,045 INFO L280 TraceCheckUtils]: 3: Hoare triple {8793#true} assume 0 == ~tmp_ndt_2~0; {8793#true} is VALID [2020-07-10 15:01:53,046 INFO L280 TraceCheckUtils]: 4: Hoare triple {8793#true} ~returnVal2~0 := 0; {8793#true} is VALID [2020-07-10 15:01:53,046 INFO L280 TraceCheckUtils]: 5: Hoare triple {8793#true} assume !(~s~0 == ~NP~0); {8793#true} is VALID [2020-07-10 15:01:53,046 INFO L280 TraceCheckUtils]: 6: Hoare triple {8793#true} assume !(~s~0 == ~MPR1~0); {8793#true} is VALID [2020-07-10 15:01:53,046 INFO L280 TraceCheckUtils]: 7: Hoare triple {8793#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {8793#true} is VALID [2020-07-10 15:01:53,047 INFO L280 TraceCheckUtils]: 8: Hoare triple {8793#true} #res := ~returnVal2~0; {8793#true} is VALID [2020-07-10 15:01:53,047 INFO L280 TraceCheckUtils]: 9: Hoare triple {8793#true} assume true; {8793#true} is VALID [2020-07-10 15:01:53,047 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {8793#true} {8793#true} #476#return; {8793#true} is VALID [2020-07-10 15:01:53,048 INFO L280 TraceCheckUtils]: 0: Hoare triple {8830#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~s~0 |old(~s~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {8793#true} is VALID [2020-07-10 15:01:53,048 INFO L280 TraceCheckUtils]: 1: Hoare triple {8793#true} assume !(0 == ~irpStack__MinorFunction~0); {8793#true} is VALID [2020-07-10 15:01:53,048 INFO L280 TraceCheckUtils]: 2: Hoare triple {8793#true} assume 23 == ~irpStack__MinorFunction~0; {8793#true} is VALID [2020-07-10 15:01:53,048 INFO L280 TraceCheckUtils]: 3: Hoare triple {8793#true} ~devExt__SurpriseRemoved~0 := 1; {8793#true} is VALID [2020-07-10 15:01:53,048 INFO L280 TraceCheckUtils]: 4: Hoare triple {8793#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {8793#true} is VALID [2020-07-10 15:01:53,049 INFO L280 TraceCheckUtils]: 5: Hoare triple {8793#true} #t~post10 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post10;havoc #t~post10;#t~post11 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post11;havoc #t~post11; {8793#true} is VALID [2020-07-10 15:01:53,050 INFO L263 TraceCheckUtils]: 6: Hoare triple {8793#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {8842#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:53,050 INFO L280 TraceCheckUtils]: 7: Hoare triple {8842#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {8793#true} is VALID [2020-07-10 15:01:53,051 INFO L280 TraceCheckUtils]: 8: Hoare triple {8793#true} assume !(0 != ~compRegistered~0); {8793#true} is VALID [2020-07-10 15:01:53,051 INFO L280 TraceCheckUtils]: 9: Hoare triple {8793#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {8793#true} is VALID [2020-07-10 15:01:53,051 INFO L280 TraceCheckUtils]: 10: Hoare triple {8793#true} assume 0 == ~tmp_ndt_2~0; {8793#true} is VALID [2020-07-10 15:01:53,051 INFO L280 TraceCheckUtils]: 11: Hoare triple {8793#true} ~returnVal2~0 := 0; {8793#true} is VALID [2020-07-10 15:01:53,052 INFO L280 TraceCheckUtils]: 12: Hoare triple {8793#true} assume !(~s~0 == ~NP~0); {8793#true} is VALID [2020-07-10 15:01:53,052 INFO L280 TraceCheckUtils]: 13: Hoare triple {8793#true} assume !(~s~0 == ~MPR1~0); {8793#true} is VALID [2020-07-10 15:01:53,052 INFO L280 TraceCheckUtils]: 14: Hoare triple {8793#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {8793#true} is VALID [2020-07-10 15:01:53,052 INFO L280 TraceCheckUtils]: 15: Hoare triple {8793#true} #res := ~returnVal2~0; {8793#true} is VALID [2020-07-10 15:01:53,052 INFO L280 TraceCheckUtils]: 16: Hoare triple {8793#true} assume true; {8793#true} is VALID [2020-07-10 15:01:53,053 INFO L275 TraceCheckUtils]: 17: Hoare quadruple {8793#true} {8793#true} #476#return; {8793#true} is VALID [2020-07-10 15:01:53,053 INFO L280 TraceCheckUtils]: 18: Hoare triple {8793#true} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12; {8793#true} is VALID [2020-07-10 15:01:53,053 INFO L280 TraceCheckUtils]: 19: Hoare triple {8793#true} #res := ~status~0; {8793#true} is VALID [2020-07-10 15:01:53,053 INFO L280 TraceCheckUtils]: 20: Hoare triple {8793#true} assume true; {8793#true} is VALID [2020-07-10 15:01:53,053 INFO L275 TraceCheckUtils]: 21: Hoare quadruple {8793#true} {8793#true} #444#return; {8793#true} is VALID [2020-07-10 15:01:53,055 INFO L263 TraceCheckUtils]: 0: Hoare triple {8793#true} call ULTIMATE.init(); {8827#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:53,056 INFO L280 TraceCheckUtils]: 1: Hoare triple {8827#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8793#true} is VALID [2020-07-10 15:01:53,056 INFO L280 TraceCheckUtils]: 2: Hoare triple {8793#true} assume true; {8793#true} is VALID [2020-07-10 15:01:53,056 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {8793#true} {8793#true} #460#return; {8793#true} is VALID [2020-07-10 15:01:53,056 INFO L263 TraceCheckUtils]: 4: Hoare triple {8793#true} call #t~ret31 := main(); {8793#true} is VALID [2020-07-10 15:01:53,056 INFO L280 TraceCheckUtils]: 5: Hoare triple {8793#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {8793#true} is VALID [2020-07-10 15:01:53,058 INFO L263 TraceCheckUtils]: 6: Hoare triple {8793#true} call _BLAST_init(); {8828#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:53,058 INFO L280 TraceCheckUtils]: 7: Hoare triple {8828#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8793#true} is VALID [2020-07-10 15:01:53,058 INFO L280 TraceCheckUtils]: 8: Hoare triple {8793#true} assume true; {8793#true} is VALID [2020-07-10 15:01:53,058 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {8793#true} {8793#true} #440#return; {8793#true} is VALID [2020-07-10 15:01:53,058 INFO L280 TraceCheckUtils]: 10: Hoare triple {8793#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {8793#true} is VALID [2020-07-10 15:01:53,059 INFO L280 TraceCheckUtils]: 11: Hoare triple {8793#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {8793#true} is VALID [2020-07-10 15:01:53,060 INFO L263 TraceCheckUtils]: 12: Hoare triple {8793#true} call stub_driver_init(); {8829#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:53,060 INFO L280 TraceCheckUtils]: 13: Hoare triple {8829#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8793#true} is VALID [2020-07-10 15:01:53,060 INFO L280 TraceCheckUtils]: 14: Hoare triple {8793#true} assume true; {8793#true} is VALID [2020-07-10 15:01:53,060 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {8793#true} {8793#true} #442#return; {8793#true} is VALID [2020-07-10 15:01:53,060 INFO L280 TraceCheckUtils]: 16: Hoare triple {8793#true} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {8793#true} is VALID [2020-07-10 15:01:53,061 INFO L280 TraceCheckUtils]: 17: Hoare triple {8793#true} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {8793#true} is VALID [2020-07-10 15:01:53,061 INFO L280 TraceCheckUtils]: 18: Hoare triple {8793#true} assume 3 == ~tmp_ndt_1~0; {8793#true} is VALID [2020-07-10 15:01:53,066 INFO L263 TraceCheckUtils]: 19: Hoare triple {8793#true} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {8830#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~s~0 |old(~s~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:53,066 INFO L280 TraceCheckUtils]: 20: Hoare triple {8830#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~s~0 |old(~s~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {8793#true} is VALID [2020-07-10 15:01:53,066 INFO L280 TraceCheckUtils]: 21: Hoare triple {8793#true} assume !(0 == ~irpStack__MinorFunction~0); {8793#true} is VALID [2020-07-10 15:01:53,066 INFO L280 TraceCheckUtils]: 22: Hoare triple {8793#true} assume 23 == ~irpStack__MinorFunction~0; {8793#true} is VALID [2020-07-10 15:01:53,067 INFO L280 TraceCheckUtils]: 23: Hoare triple {8793#true} ~devExt__SurpriseRemoved~0 := 1; {8793#true} is VALID [2020-07-10 15:01:53,067 INFO L280 TraceCheckUtils]: 24: Hoare triple {8793#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {8793#true} is VALID [2020-07-10 15:01:53,067 INFO L280 TraceCheckUtils]: 25: Hoare triple {8793#true} #t~post10 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post10;havoc #t~post10;#t~post11 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post11;havoc #t~post11; {8793#true} is VALID [2020-07-10 15:01:53,068 INFO L263 TraceCheckUtils]: 26: Hoare triple {8793#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {8842#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:53,068 INFO L280 TraceCheckUtils]: 27: Hoare triple {8842#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {8793#true} is VALID [2020-07-10 15:01:53,068 INFO L280 TraceCheckUtils]: 28: Hoare triple {8793#true} assume !(0 != ~compRegistered~0); {8793#true} is VALID [2020-07-10 15:01:53,068 INFO L280 TraceCheckUtils]: 29: Hoare triple {8793#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {8793#true} is VALID [2020-07-10 15:01:53,069 INFO L280 TraceCheckUtils]: 30: Hoare triple {8793#true} assume 0 == ~tmp_ndt_2~0; {8793#true} is VALID [2020-07-10 15:01:53,069 INFO L280 TraceCheckUtils]: 31: Hoare triple {8793#true} ~returnVal2~0 := 0; {8793#true} is VALID [2020-07-10 15:01:53,069 INFO L280 TraceCheckUtils]: 32: Hoare triple {8793#true} assume !(~s~0 == ~NP~0); {8793#true} is VALID [2020-07-10 15:01:53,069 INFO L280 TraceCheckUtils]: 33: Hoare triple {8793#true} assume !(~s~0 == ~MPR1~0); {8793#true} is VALID [2020-07-10 15:01:53,069 INFO L280 TraceCheckUtils]: 34: Hoare triple {8793#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {8793#true} is VALID [2020-07-10 15:01:53,070 INFO L280 TraceCheckUtils]: 35: Hoare triple {8793#true} #res := ~returnVal2~0; {8793#true} is VALID [2020-07-10 15:01:53,070 INFO L280 TraceCheckUtils]: 36: Hoare triple {8793#true} assume true; {8793#true} is VALID [2020-07-10 15:01:53,070 INFO L275 TraceCheckUtils]: 37: Hoare quadruple {8793#true} {8793#true} #476#return; {8793#true} is VALID [2020-07-10 15:01:53,070 INFO L280 TraceCheckUtils]: 38: Hoare triple {8793#true} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12; {8793#true} is VALID [2020-07-10 15:01:53,070 INFO L280 TraceCheckUtils]: 39: Hoare triple {8793#true} #res := ~status~0; {8793#true} is VALID [2020-07-10 15:01:53,071 INFO L280 TraceCheckUtils]: 40: Hoare triple {8793#true} assume true; {8793#true} is VALID [2020-07-10 15:01:53,071 INFO L275 TraceCheckUtils]: 41: Hoare quadruple {8793#true} {8793#true} #444#return; {8793#true} is VALID [2020-07-10 15:01:53,071 INFO L280 TraceCheckUtils]: 42: Hoare triple {8793#true} assume -2147483648 <= #t~ret23 && #t~ret23 <= 2147483647;~status~1 := #t~ret23;havoc #t~ret23; {8793#true} is VALID [2020-07-10 15:01:53,072 INFO L280 TraceCheckUtils]: 43: Hoare triple {8793#true} assume !(1 == ~pended~0); {8826#(not (= 1 ~pended~0))} is VALID [2020-07-10 15:01:53,072 INFO L280 TraceCheckUtils]: 44: Hoare triple {8826#(not (= 1 ~pended~0))} assume !(1 == ~pended~0); {8826#(not (= 1 ~pended~0))} is VALID [2020-07-10 15:01:53,073 INFO L280 TraceCheckUtils]: 45: Hoare triple {8826#(not (= 1 ~pended~0))} assume ~s~0 != ~UNLOADED~0; {8826#(not (= 1 ~pended~0))} is VALID [2020-07-10 15:01:53,073 INFO L280 TraceCheckUtils]: 46: Hoare triple {8826#(not (= 1 ~pended~0))} assume -1 != ~status~1; {8826#(not (= 1 ~pended~0))} is VALID [2020-07-10 15:01:53,074 INFO L280 TraceCheckUtils]: 47: Hoare triple {8826#(not (= 1 ~pended~0))} assume !(~s~0 != ~SKIP2~0); {8826#(not (= 1 ~pended~0))} is VALID [2020-07-10 15:01:53,074 INFO L280 TraceCheckUtils]: 48: Hoare triple {8826#(not (= 1 ~pended~0))} assume 1 == ~pended~0; {8794#false} is VALID [2020-07-10 15:01:53,075 INFO L280 TraceCheckUtils]: 49: Hoare triple {8794#false} assume 259 != ~status~1; {8794#false} is VALID [2020-07-10 15:01:53,075 INFO L263 TraceCheckUtils]: 50: Hoare triple {8794#false} call errorFn(); {8794#false} is VALID [2020-07-10 15:01:53,075 INFO L280 TraceCheckUtils]: 51: Hoare triple {8794#false} assume !false; {8794#false} is VALID [2020-07-10 15:01:53,082 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:01:53,086 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807299788] [2020-07-10 15:01:53,086 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:01:53,087 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2020-07-10 15:01:53,087 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1035090865] [2020-07-10 15:01:53,087 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 52 [2020-07-10 15:01:53,088 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:01:53,088 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2020-07-10 15:01:53,142 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 52 edges. 52 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:53,142 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2020-07-10 15:01:53,143 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:01:53,143 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2020-07-10 15:01:53,143 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2020-07-10 15:01:53,143 INFO L87 Difference]: Start difference. First operand 188 states and 244 transitions. Second operand 8 states. [2020-07-10 15:01:54,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:54,422 INFO L93 Difference]: Finished difference Result 203 states and 262 transitions. [2020-07-10 15:01:54,422 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-10 15:01:54,422 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 52 [2020-07-10 15:01:54,422 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:01:54,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-10 15:01:54,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 206 transitions. [2020-07-10 15:01:54,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-10 15:01:54,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 206 transitions. [2020-07-10 15:01:54,427 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 206 transitions. [2020-07-10 15:01:54,765 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 206 edges. 206 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:54,767 INFO L225 Difference]: With dead ends: 203 [2020-07-10 15:01:54,767 INFO L226 Difference]: Without dead ends: 91 [2020-07-10 15:01:54,768 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2020-07-10 15:01:54,769 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2020-07-10 15:01:55,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2020-07-10 15:01:55,054 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:01:55,054 INFO L82 GeneralOperation]: Start isEquivalent. First operand 91 states. Second operand 91 states. [2020-07-10 15:01:55,054 INFO L74 IsIncluded]: Start isIncluded. First operand 91 states. Second operand 91 states. [2020-07-10 15:01:55,055 INFO L87 Difference]: Start difference. First operand 91 states. Second operand 91 states. [2020-07-10 15:01:55,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:55,058 INFO L93 Difference]: Finished difference Result 91 states and 102 transitions. [2020-07-10 15:01:55,058 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 102 transitions. [2020-07-10 15:01:55,059 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:55,059 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:55,059 INFO L74 IsIncluded]: Start isIncluded. First operand 91 states. Second operand 91 states. [2020-07-10 15:01:55,059 INFO L87 Difference]: Start difference. First operand 91 states. Second operand 91 states. [2020-07-10 15:01:55,061 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:55,061 INFO L93 Difference]: Finished difference Result 91 states and 102 transitions. [2020-07-10 15:01:55,061 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 102 transitions. [2020-07-10 15:01:55,061 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:55,062 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:55,062 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:01:55,062 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:01:55,062 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 91 states. [2020-07-10 15:01:55,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 102 transitions. [2020-07-10 15:01:55,064 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 102 transitions. Word has length 52 [2020-07-10 15:01:55,064 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:01:55,064 INFO L479 AbstractCegarLoop]: Abstraction has 91 states and 102 transitions. [2020-07-10 15:01:55,064 INFO L480 AbstractCegarLoop]: Interpolant automaton has 8 states. [2020-07-10 15:01:55,064 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 102 transitions. [2020-07-10 15:01:55,065 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2020-07-10 15:01:55,065 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:01:55,065 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:01:55,065 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-10 15:01:55,066 INFO L427 AbstractCegarLoop]: === Iteration 10 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:01:55,066 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:01:55,066 INFO L82 PathProgramCache]: Analyzing trace with hash -1516710605, now seen corresponding path program 1 times [2020-07-10 15:01:55,066 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:01:55,066 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [864899669] [2020-07-10 15:01:55,066 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:01:55,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:55,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:55,183 INFO L280 TraceCheckUtils]: 0: Hoare triple {9464#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {9429#true} is VALID [2020-07-10 15:01:55,184 INFO L280 TraceCheckUtils]: 1: Hoare triple {9429#true} assume true; {9429#true} is VALID [2020-07-10 15:01:55,184 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {9429#true} {9429#true} #460#return; {9429#true} is VALID [2020-07-10 15:01:55,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:55,241 INFO L280 TraceCheckUtils]: 0: Hoare triple {9465#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,242 INFO L280 TraceCheckUtils]: 1: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} assume true; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,242 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} {9429#true} #440#return; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:55,269 INFO L280 TraceCheckUtils]: 0: Hoare triple {9466#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9429#true} is VALID [2020-07-10 15:01:55,269 INFO L280 TraceCheckUtils]: 1: Hoare triple {9429#true} assume true; {9429#true} is VALID [2020-07-10 15:01:55,270 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {9429#true} {9437#(<= (+ ~NP~0 4) ~MPR1~0)} #442#return; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:55,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:55,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:55,337 INFO L280 TraceCheckUtils]: 0: Hoare triple {9481#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {9429#true} is VALID [2020-07-10 15:01:55,338 INFO L280 TraceCheckUtils]: 1: Hoare triple {9429#true} assume true; {9429#true} is VALID [2020-07-10 15:01:55,338 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {9429#true} {9429#true} #438#return; {9429#true} is VALID [2020-07-10 15:01:55,338 INFO L280 TraceCheckUtils]: 0: Hoare triple {9481#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {9429#true} is VALID [2020-07-10 15:01:55,339 INFO L263 TraceCheckUtils]: 1: Hoare triple {9429#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {9481#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:55,339 INFO L280 TraceCheckUtils]: 2: Hoare triple {9481#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {9429#true} is VALID [2020-07-10 15:01:55,339 INFO L280 TraceCheckUtils]: 3: Hoare triple {9429#true} assume true; {9429#true} is VALID [2020-07-10 15:01:55,340 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {9429#true} {9429#true} #438#return; {9429#true} is VALID [2020-07-10 15:01:55,340 INFO L280 TraceCheckUtils]: 5: Hoare triple {9429#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {9429#true} is VALID [2020-07-10 15:01:55,340 INFO L280 TraceCheckUtils]: 6: Hoare triple {9429#true} assume true; {9429#true} is VALID [2020-07-10 15:01:55,340 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {9429#true} {9429#true} #448#return; {9429#true} is VALID [2020-07-10 15:01:55,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:55,361 INFO L280 TraceCheckUtils]: 0: Hoare triple {9485#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,362 INFO L280 TraceCheckUtils]: 1: Hoare triple {9479#(= ~MPR1~0 ~s~0)} assume true; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,363 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {9479#(= ~MPR1~0 ~s~0)} {9429#true} #450#return; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,363 INFO L280 TraceCheckUtils]: 0: Hoare triple {9467#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {9429#true} is VALID [2020-07-10 15:01:55,363 INFO L280 TraceCheckUtils]: 1: Hoare triple {9429#true} assume 0 != ~compRegistered~0; {9429#true} is VALID [2020-07-10 15:01:55,364 INFO L263 TraceCheckUtils]: 2: Hoare triple {9429#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {9481#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:55,364 INFO L280 TraceCheckUtils]: 3: Hoare triple {9481#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {9429#true} is VALID [2020-07-10 15:01:55,365 INFO L263 TraceCheckUtils]: 4: Hoare triple {9429#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {9481#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:55,365 INFO L280 TraceCheckUtils]: 5: Hoare triple {9481#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {9429#true} is VALID [2020-07-10 15:01:55,365 INFO L280 TraceCheckUtils]: 6: Hoare triple {9429#true} assume true; {9429#true} is VALID [2020-07-10 15:01:55,366 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {9429#true} {9429#true} #438#return; {9429#true} is VALID [2020-07-10 15:01:55,366 INFO L280 TraceCheckUtils]: 8: Hoare triple {9429#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {9429#true} is VALID [2020-07-10 15:01:55,366 INFO L280 TraceCheckUtils]: 9: Hoare triple {9429#true} assume true; {9429#true} is VALID [2020-07-10 15:01:55,366 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {9429#true} {9429#true} #448#return; {9429#true} is VALID [2020-07-10 15:01:55,366 INFO L280 TraceCheckUtils]: 11: Hoare triple {9429#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {9429#true} is VALID [2020-07-10 15:01:55,367 INFO L263 TraceCheckUtils]: 12: Hoare triple {9429#true} call stubMoreProcessingRequired(); {9485#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:55,367 INFO L280 TraceCheckUtils]: 13: Hoare triple {9485#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,367 INFO L280 TraceCheckUtils]: 14: Hoare triple {9479#(= ~MPR1~0 ~s~0)} assume true; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,368 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {9479#(= ~MPR1~0 ~s~0)} {9429#true} #450#return; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,368 INFO L280 TraceCheckUtils]: 16: Hoare triple {9479#(= ~MPR1~0 ~s~0)} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,369 INFO L280 TraceCheckUtils]: 17: Hoare triple {9479#(= ~MPR1~0 ~s~0)} assume 0 == ~tmp_ndt_2~0; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,369 INFO L280 TraceCheckUtils]: 18: Hoare triple {9479#(= ~MPR1~0 ~s~0)} ~returnVal2~0 := 0; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,370 INFO L280 TraceCheckUtils]: 19: Hoare triple {9479#(= ~MPR1~0 ~s~0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {9480#(= ~NP~0 ~MPR1~0)} is VALID [2020-07-10 15:01:55,370 INFO L280 TraceCheckUtils]: 20: Hoare triple {9480#(= ~NP~0 ~MPR1~0)} #res := ~returnVal2~0; {9480#(= ~NP~0 ~MPR1~0)} is VALID [2020-07-10 15:01:55,371 INFO L280 TraceCheckUtils]: 21: Hoare triple {9480#(= ~NP~0 ~MPR1~0)} assume true; {9480#(= ~NP~0 ~MPR1~0)} is VALID [2020-07-10 15:01:55,371 INFO L275 TraceCheckUtils]: 22: Hoare quadruple {9480#(= ~NP~0 ~MPR1~0)} {9437#(<= (+ ~NP~0 4) ~MPR1~0)} #468#return; {9430#false} is VALID [2020-07-10 15:01:55,373 INFO L263 TraceCheckUtils]: 0: Hoare triple {9429#true} call ULTIMATE.init(); {9464#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:55,374 INFO L280 TraceCheckUtils]: 1: Hoare triple {9464#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {9429#true} is VALID [2020-07-10 15:01:55,374 INFO L280 TraceCheckUtils]: 2: Hoare triple {9429#true} assume true; {9429#true} is VALID [2020-07-10 15:01:55,374 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {9429#true} {9429#true} #460#return; {9429#true} is VALID [2020-07-10 15:01:55,374 INFO L263 TraceCheckUtils]: 4: Hoare triple {9429#true} call #t~ret31 := main(); {9429#true} is VALID [2020-07-10 15:01:55,374 INFO L280 TraceCheckUtils]: 5: Hoare triple {9429#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {9429#true} is VALID [2020-07-10 15:01:55,377 INFO L263 TraceCheckUtils]: 6: Hoare triple {9429#true} call _BLAST_init(); {9465#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:55,380 INFO L280 TraceCheckUtils]: 7: Hoare triple {9465#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,380 INFO L280 TraceCheckUtils]: 8: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} assume true; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,381 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} {9429#true} #440#return; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,381 INFO L280 TraceCheckUtils]: 10: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,382 INFO L280 TraceCheckUtils]: 11: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,382 INFO L263 TraceCheckUtils]: 12: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} call stub_driver_init(); {9466#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:55,383 INFO L280 TraceCheckUtils]: 13: Hoare triple {9466#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9429#true} is VALID [2020-07-10 15:01:55,383 INFO L280 TraceCheckUtils]: 14: Hoare triple {9429#true} assume true; {9429#true} is VALID [2020-07-10 15:01:55,383 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {9429#true} {9437#(<= (+ ~NP~0 4) ~MPR1~0)} #442#return; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,384 INFO L280 TraceCheckUtils]: 16: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,384 INFO L280 TraceCheckUtils]: 17: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,384 INFO L280 TraceCheckUtils]: 18: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} assume 3 == ~tmp_ndt_1~0; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,385 INFO L263 TraceCheckUtils]: 19: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,385 INFO L280 TraceCheckUtils]: 20: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,386 INFO L280 TraceCheckUtils]: 21: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} assume 0 == ~irpStack__MinorFunction~0; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,386 INFO L280 TraceCheckUtils]: 22: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,387 INFO L280 TraceCheckUtils]: 23: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} assume !(~s~0 != ~NP~0); {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,387 INFO L280 TraceCheckUtils]: 24: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,387 INFO L280 TraceCheckUtils]: 25: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Control~0 := 224; {9437#(<= (+ ~NP~0 4) ~MPR1~0)} is VALID [2020-07-10 15:01:55,388 INFO L263 TraceCheckUtils]: 26: Hoare triple {9437#(<= (+ ~NP~0 4) ~MPR1~0)} call #t~ret8 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {9467#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:55,388 INFO L280 TraceCheckUtils]: 27: Hoare triple {9467#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {9429#true} is VALID [2020-07-10 15:01:55,389 INFO L280 TraceCheckUtils]: 28: Hoare triple {9429#true} assume 0 != ~compRegistered~0; {9429#true} is VALID [2020-07-10 15:01:55,389 INFO L263 TraceCheckUtils]: 29: Hoare triple {9429#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {9481#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:55,389 INFO L280 TraceCheckUtils]: 30: Hoare triple {9481#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {9429#true} is VALID [2020-07-10 15:01:55,390 INFO L263 TraceCheckUtils]: 31: Hoare triple {9429#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {9481#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:55,390 INFO L280 TraceCheckUtils]: 32: Hoare triple {9481#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {9429#true} is VALID [2020-07-10 15:01:55,390 INFO L280 TraceCheckUtils]: 33: Hoare triple {9429#true} assume true; {9429#true} is VALID [2020-07-10 15:01:55,390 INFO L275 TraceCheckUtils]: 34: Hoare quadruple {9429#true} {9429#true} #438#return; {9429#true} is VALID [2020-07-10 15:01:55,390 INFO L280 TraceCheckUtils]: 35: Hoare triple {9429#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {9429#true} is VALID [2020-07-10 15:01:55,391 INFO L280 TraceCheckUtils]: 36: Hoare triple {9429#true} assume true; {9429#true} is VALID [2020-07-10 15:01:55,391 INFO L275 TraceCheckUtils]: 37: Hoare quadruple {9429#true} {9429#true} #448#return; {9429#true} is VALID [2020-07-10 15:01:55,391 INFO L280 TraceCheckUtils]: 38: Hoare triple {9429#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {9429#true} is VALID [2020-07-10 15:01:55,392 INFO L263 TraceCheckUtils]: 39: Hoare triple {9429#true} call stubMoreProcessingRequired(); {9485#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:55,392 INFO L280 TraceCheckUtils]: 40: Hoare triple {9485#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,393 INFO L280 TraceCheckUtils]: 41: Hoare triple {9479#(= ~MPR1~0 ~s~0)} assume true; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,394 INFO L275 TraceCheckUtils]: 42: Hoare quadruple {9479#(= ~MPR1~0 ~s~0)} {9429#true} #450#return; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,395 INFO L280 TraceCheckUtils]: 43: Hoare triple {9479#(= ~MPR1~0 ~s~0)} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,395 INFO L280 TraceCheckUtils]: 44: Hoare triple {9479#(= ~MPR1~0 ~s~0)} assume 0 == ~tmp_ndt_2~0; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,395 INFO L280 TraceCheckUtils]: 45: Hoare triple {9479#(= ~MPR1~0 ~s~0)} ~returnVal2~0 := 0; {9479#(= ~MPR1~0 ~s~0)} is VALID [2020-07-10 15:01:55,396 INFO L280 TraceCheckUtils]: 46: Hoare triple {9479#(= ~MPR1~0 ~s~0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {9480#(= ~NP~0 ~MPR1~0)} is VALID [2020-07-10 15:01:55,396 INFO L280 TraceCheckUtils]: 47: Hoare triple {9480#(= ~NP~0 ~MPR1~0)} #res := ~returnVal2~0; {9480#(= ~NP~0 ~MPR1~0)} is VALID [2020-07-10 15:01:55,397 INFO L280 TraceCheckUtils]: 48: Hoare triple {9480#(= ~NP~0 ~MPR1~0)} assume true; {9480#(= ~NP~0 ~MPR1~0)} is VALID [2020-07-10 15:01:55,398 INFO L275 TraceCheckUtils]: 49: Hoare quadruple {9480#(= ~NP~0 ~MPR1~0)} {9437#(<= (+ ~NP~0 4) ~MPR1~0)} #468#return; {9430#false} is VALID [2020-07-10 15:01:55,398 INFO L280 TraceCheckUtils]: 50: Hoare triple {9430#false} assume -2147483648 <= #t~ret8 && #t~ret8 <= 2147483647;~status~0 := #t~ret8;havoc #t~ret8;~__cil_tmp23~0 := ~status~0; {9430#false} is VALID [2020-07-10 15:01:55,398 INFO L280 TraceCheckUtils]: 51: Hoare triple {9430#false} assume 259 == ~__cil_tmp23~0; {9430#false} is VALID [2020-07-10 15:01:55,399 INFO L263 TraceCheckUtils]: 52: Hoare triple {9430#false} call #t~ret9 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {9430#false} is VALID [2020-07-10 15:01:55,399 INFO L280 TraceCheckUtils]: 53: Hoare triple {9430#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {9430#false} is VALID [2020-07-10 15:01:55,399 INFO L280 TraceCheckUtils]: 54: Hoare triple {9430#false} assume !(~s~0 == ~MPR3~0); {9430#false} is VALID [2020-07-10 15:01:55,399 INFO L280 TraceCheckUtils]: 55: Hoare triple {9430#false} assume !(1 == ~customIrp~0); {9430#false} is VALID [2020-07-10 15:01:55,399 INFO L280 TraceCheckUtils]: 56: Hoare triple {9430#false} assume ~s~0 == ~MPR3~0; {9430#false} is VALID [2020-07-10 15:01:55,400 INFO L263 TraceCheckUtils]: 57: Hoare triple {9430#false} call errorFn(); {9430#false} is VALID [2020-07-10 15:01:55,400 INFO L280 TraceCheckUtils]: 58: Hoare triple {9430#false} assume !false; {9430#false} is VALID [2020-07-10 15:01:55,406 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:01:55,406 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [864899669] [2020-07-10 15:01:55,406 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:01:55,407 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2020-07-10 15:01:55,407 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [223568702] [2020-07-10 15:01:55,407 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 59 [2020-07-10 15:01:55,408 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:01:55,408 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states. [2020-07-10 15:01:55,484 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:55,484 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2020-07-10 15:01:55,484 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:01:55,485 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2020-07-10 15:01:55,485 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=77, Unknown=0, NotChecked=0, Total=110 [2020-07-10 15:01:55,485 INFO L87 Difference]: Start difference. First operand 91 states and 102 transitions. Second operand 11 states. [2020-07-10 15:01:57,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:57,129 INFO L93 Difference]: Finished difference Result 119 states and 135 transitions. [2020-07-10 15:01:57,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2020-07-10 15:01:57,129 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 59 [2020-07-10 15:01:57,129 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:01:57,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11 states. [2020-07-10 15:01:57,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 123 transitions. [2020-07-10 15:01:57,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11 states. [2020-07-10 15:01:57,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 123 transitions. [2020-07-10 15:01:57,133 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 123 transitions. [2020-07-10 15:01:57,314 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 123 edges. 123 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:57,317 INFO L225 Difference]: With dead ends: 119 [2020-07-10 15:01:57,317 INFO L226 Difference]: Without dead ends: 91 [2020-07-10 15:01:57,318 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=80, Invalid=226, Unknown=0, NotChecked=0, Total=306 [2020-07-10 15:01:57,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2020-07-10 15:01:57,630 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2020-07-10 15:01:57,631 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:01:57,631 INFO L82 GeneralOperation]: Start isEquivalent. First operand 91 states. Second operand 91 states. [2020-07-10 15:01:57,631 INFO L74 IsIncluded]: Start isIncluded. First operand 91 states. Second operand 91 states. [2020-07-10 15:01:57,631 INFO L87 Difference]: Start difference. First operand 91 states. Second operand 91 states. [2020-07-10 15:01:57,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:57,633 INFO L93 Difference]: Finished difference Result 91 states and 101 transitions. [2020-07-10 15:01:57,633 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 101 transitions. [2020-07-10 15:01:57,634 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:57,634 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:57,634 INFO L74 IsIncluded]: Start isIncluded. First operand 91 states. Second operand 91 states. [2020-07-10 15:01:57,634 INFO L87 Difference]: Start difference. First operand 91 states. Second operand 91 states. [2020-07-10 15:01:57,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:57,636 INFO L93 Difference]: Finished difference Result 91 states and 101 transitions. [2020-07-10 15:01:57,636 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 101 transitions. [2020-07-10 15:01:57,636 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:57,637 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:57,637 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:01:57,637 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:01:57,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 91 states. [2020-07-10 15:01:57,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 101 transitions. [2020-07-10 15:01:57,638 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 101 transitions. Word has length 59 [2020-07-10 15:01:57,638 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:01:57,638 INFO L479 AbstractCegarLoop]: Abstraction has 91 states and 101 transitions. [2020-07-10 15:01:57,638 INFO L480 AbstractCegarLoop]: Interpolant automaton has 11 states. [2020-07-10 15:01:57,639 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 101 transitions. [2020-07-10 15:01:57,639 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2020-07-10 15:01:57,639 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:01:57,639 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:01:57,639 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-10 15:01:57,640 INFO L427 AbstractCegarLoop]: === Iteration 11 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:01:57,640 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:01:57,640 INFO L82 PathProgramCache]: Analyzing trace with hash -14076392, now seen corresponding path program 1 times [2020-07-10 15:01:57,640 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:01:57,640 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1964118902] [2020-07-10 15:01:57,640 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:01:57,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:57,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:57,734 INFO L280 TraceCheckUtils]: 0: Hoare triple {10014#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {9978#true} is VALID [2020-07-10 15:01:57,735 INFO L280 TraceCheckUtils]: 1: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,735 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {9978#true} {9978#true} #460#return; {9978#true} is VALID [2020-07-10 15:01:57,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:57,781 INFO L280 TraceCheckUtils]: 0: Hoare triple {10015#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9978#true} is VALID [2020-07-10 15:01:57,782 INFO L280 TraceCheckUtils]: 1: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,782 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {9978#true} {9978#true} #440#return; {9978#true} is VALID [2020-07-10 15:01:57,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:57,807 INFO L280 TraceCheckUtils]: 0: Hoare triple {10016#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9978#true} is VALID [2020-07-10 15:01:57,807 INFO L280 TraceCheckUtils]: 1: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,807 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {9978#true} {9978#true} #442#return; {9978#true} is VALID [2020-07-10 15:01:57,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:57,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:57,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:57,869 INFO L280 TraceCheckUtils]: 0: Hoare triple {10030#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {9978#true} is VALID [2020-07-10 15:01:57,869 INFO L280 TraceCheckUtils]: 1: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,870 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {9978#true} {9978#true} #438#return; {9978#true} is VALID [2020-07-10 15:01:57,870 INFO L280 TraceCheckUtils]: 0: Hoare triple {10030#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {9978#true} is VALID [2020-07-10 15:01:57,875 INFO L263 TraceCheckUtils]: 1: Hoare triple {9978#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {10030#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:57,875 INFO L280 TraceCheckUtils]: 2: Hoare triple {10030#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {9978#true} is VALID [2020-07-10 15:01:57,875 INFO L280 TraceCheckUtils]: 3: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,876 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {9978#true} {9978#true} #438#return; {9978#true} is VALID [2020-07-10 15:01:57,876 INFO L280 TraceCheckUtils]: 5: Hoare triple {9978#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {9978#true} is VALID [2020-07-10 15:01:57,876 INFO L280 TraceCheckUtils]: 6: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,876 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {9978#true} {9978#true} #448#return; {9978#true} is VALID [2020-07-10 15:01:57,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:57,899 INFO L280 TraceCheckUtils]: 0: Hoare triple {10034#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {9978#true} is VALID [2020-07-10 15:01:57,899 INFO L280 TraceCheckUtils]: 1: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,899 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {9978#true} {9978#true} #450#return; {9978#true} is VALID [2020-07-10 15:01:57,900 INFO L280 TraceCheckUtils]: 0: Hoare triple {10017#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {9978#true} is VALID [2020-07-10 15:01:57,900 INFO L280 TraceCheckUtils]: 1: Hoare triple {9978#true} assume 0 != ~compRegistered~0; {9978#true} is VALID [2020-07-10 15:01:57,901 INFO L263 TraceCheckUtils]: 2: Hoare triple {9978#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {10030#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:57,901 INFO L280 TraceCheckUtils]: 3: Hoare triple {10030#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {9978#true} is VALID [2020-07-10 15:01:57,902 INFO L263 TraceCheckUtils]: 4: Hoare triple {9978#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {10030#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:57,902 INFO L280 TraceCheckUtils]: 5: Hoare triple {10030#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {9978#true} is VALID [2020-07-10 15:01:57,903 INFO L280 TraceCheckUtils]: 6: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,903 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {9978#true} {9978#true} #438#return; {9978#true} is VALID [2020-07-10 15:01:57,903 INFO L280 TraceCheckUtils]: 8: Hoare triple {9978#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {9978#true} is VALID [2020-07-10 15:01:57,903 INFO L280 TraceCheckUtils]: 9: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,903 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {9978#true} {9978#true} #448#return; {9978#true} is VALID [2020-07-10 15:01:57,903 INFO L280 TraceCheckUtils]: 11: Hoare triple {9978#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {9978#true} is VALID [2020-07-10 15:01:57,904 INFO L263 TraceCheckUtils]: 12: Hoare triple {9978#true} call stubMoreProcessingRequired(); {10034#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:57,904 INFO L280 TraceCheckUtils]: 13: Hoare triple {10034#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {9978#true} is VALID [2020-07-10 15:01:57,905 INFO L280 TraceCheckUtils]: 14: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,905 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {9978#true} {9978#true} #450#return; {9978#true} is VALID [2020-07-10 15:01:57,905 INFO L280 TraceCheckUtils]: 16: Hoare triple {9978#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {9978#true} is VALID [2020-07-10 15:01:57,905 INFO L280 TraceCheckUtils]: 17: Hoare triple {9978#true} assume 0 == ~tmp_ndt_2~0; {9978#true} is VALID [2020-07-10 15:01:57,906 INFO L280 TraceCheckUtils]: 18: Hoare triple {9978#true} ~returnVal2~0 := 0; {10029#(<= IofCallDriver_~returnVal2~0 0)} is VALID [2020-07-10 15:01:57,906 INFO L280 TraceCheckUtils]: 19: Hoare triple {10029#(<= IofCallDriver_~returnVal2~0 0)} assume !(~s~0 == ~NP~0); {10029#(<= IofCallDriver_~returnVal2~0 0)} is VALID [2020-07-10 15:01:57,907 INFO L280 TraceCheckUtils]: 20: Hoare triple {10029#(<= IofCallDriver_~returnVal2~0 0)} assume ~s~0 == ~MPR1~0; {10029#(<= IofCallDriver_~returnVal2~0 0)} is VALID [2020-07-10 15:01:57,907 INFO L280 TraceCheckUtils]: 21: Hoare triple {10029#(<= IofCallDriver_~returnVal2~0 0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {9979#false} is VALID [2020-07-10 15:01:57,908 INFO L280 TraceCheckUtils]: 22: Hoare triple {9979#false} #res := ~returnVal2~0; {9979#false} is VALID [2020-07-10 15:01:57,908 INFO L280 TraceCheckUtils]: 23: Hoare triple {9979#false} assume true; {9979#false} is VALID [2020-07-10 15:01:57,908 INFO L275 TraceCheckUtils]: 24: Hoare quadruple {9979#false} {9978#true} #468#return; {9979#false} is VALID [2020-07-10 15:01:57,910 INFO L263 TraceCheckUtils]: 0: Hoare triple {9978#true} call ULTIMATE.init(); {10014#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:57,911 INFO L280 TraceCheckUtils]: 1: Hoare triple {10014#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {9978#true} is VALID [2020-07-10 15:01:57,911 INFO L280 TraceCheckUtils]: 2: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,911 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {9978#true} {9978#true} #460#return; {9978#true} is VALID [2020-07-10 15:01:57,911 INFO L263 TraceCheckUtils]: 4: Hoare triple {9978#true} call #t~ret31 := main(); {9978#true} is VALID [2020-07-10 15:01:57,911 INFO L280 TraceCheckUtils]: 5: Hoare triple {9978#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {9978#true} is VALID [2020-07-10 15:01:57,914 INFO L263 TraceCheckUtils]: 6: Hoare triple {9978#true} call _BLAST_init(); {10015#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:57,915 INFO L280 TraceCheckUtils]: 7: Hoare triple {10015#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9978#true} is VALID [2020-07-10 15:01:57,915 INFO L280 TraceCheckUtils]: 8: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,915 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {9978#true} {9978#true} #440#return; {9978#true} is VALID [2020-07-10 15:01:57,915 INFO L280 TraceCheckUtils]: 10: Hoare triple {9978#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {9978#true} is VALID [2020-07-10 15:01:57,915 INFO L280 TraceCheckUtils]: 11: Hoare triple {9978#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {9978#true} is VALID [2020-07-10 15:01:57,916 INFO L263 TraceCheckUtils]: 12: Hoare triple {9978#true} call stub_driver_init(); {10016#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:57,917 INFO L280 TraceCheckUtils]: 13: Hoare triple {10016#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9978#true} is VALID [2020-07-10 15:01:57,917 INFO L280 TraceCheckUtils]: 14: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,917 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {9978#true} {9978#true} #442#return; {9978#true} is VALID [2020-07-10 15:01:57,917 INFO L280 TraceCheckUtils]: 16: Hoare triple {9978#true} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {9978#true} is VALID [2020-07-10 15:01:57,917 INFO L280 TraceCheckUtils]: 17: Hoare triple {9978#true} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {9978#true} is VALID [2020-07-10 15:01:57,917 INFO L280 TraceCheckUtils]: 18: Hoare triple {9978#true} assume 3 == ~tmp_ndt_1~0; {9978#true} is VALID [2020-07-10 15:01:57,918 INFO L263 TraceCheckUtils]: 19: Hoare triple {9978#true} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {9978#true} is VALID [2020-07-10 15:01:57,918 INFO L280 TraceCheckUtils]: 20: Hoare triple {9978#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {9978#true} is VALID [2020-07-10 15:01:57,918 INFO L280 TraceCheckUtils]: 21: Hoare triple {9978#true} assume 0 == ~irpStack__MinorFunction~0; {9978#true} is VALID [2020-07-10 15:01:57,918 INFO L280 TraceCheckUtils]: 22: Hoare triple {9978#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {9978#true} is VALID [2020-07-10 15:01:57,918 INFO L280 TraceCheckUtils]: 23: Hoare triple {9978#true} assume !(~s~0 != ~NP~0); {9978#true} is VALID [2020-07-10 15:01:57,918 INFO L280 TraceCheckUtils]: 24: Hoare triple {9978#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {9978#true} is VALID [2020-07-10 15:01:57,919 INFO L280 TraceCheckUtils]: 25: Hoare triple {9978#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Control~0 := 224; {9978#true} is VALID [2020-07-10 15:01:57,920 INFO L263 TraceCheckUtils]: 26: Hoare triple {9978#true} call #t~ret8 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {10017#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:57,920 INFO L280 TraceCheckUtils]: 27: Hoare triple {10017#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {9978#true} is VALID [2020-07-10 15:01:57,920 INFO L280 TraceCheckUtils]: 28: Hoare triple {9978#true} assume 0 != ~compRegistered~0; {9978#true} is VALID [2020-07-10 15:01:57,921 INFO L263 TraceCheckUtils]: 29: Hoare triple {9978#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {10030#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:57,921 INFO L280 TraceCheckUtils]: 30: Hoare triple {10030#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {9978#true} is VALID [2020-07-10 15:01:57,922 INFO L263 TraceCheckUtils]: 31: Hoare triple {9978#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {10030#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:57,922 INFO L280 TraceCheckUtils]: 32: Hoare triple {10030#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {9978#true} is VALID [2020-07-10 15:01:57,922 INFO L280 TraceCheckUtils]: 33: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,923 INFO L275 TraceCheckUtils]: 34: Hoare quadruple {9978#true} {9978#true} #438#return; {9978#true} is VALID [2020-07-10 15:01:57,923 INFO L280 TraceCheckUtils]: 35: Hoare triple {9978#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {9978#true} is VALID [2020-07-10 15:01:57,923 INFO L280 TraceCheckUtils]: 36: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,923 INFO L275 TraceCheckUtils]: 37: Hoare quadruple {9978#true} {9978#true} #448#return; {9978#true} is VALID [2020-07-10 15:01:57,923 INFO L280 TraceCheckUtils]: 38: Hoare triple {9978#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {9978#true} is VALID [2020-07-10 15:01:57,924 INFO L263 TraceCheckUtils]: 39: Hoare triple {9978#true} call stubMoreProcessingRequired(); {10034#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:57,925 INFO L280 TraceCheckUtils]: 40: Hoare triple {10034#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {9978#true} is VALID [2020-07-10 15:01:57,925 INFO L280 TraceCheckUtils]: 41: Hoare triple {9978#true} assume true; {9978#true} is VALID [2020-07-10 15:01:57,925 INFO L275 TraceCheckUtils]: 42: Hoare quadruple {9978#true} {9978#true} #450#return; {9978#true} is VALID [2020-07-10 15:01:57,925 INFO L280 TraceCheckUtils]: 43: Hoare triple {9978#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {9978#true} is VALID [2020-07-10 15:01:57,925 INFO L280 TraceCheckUtils]: 44: Hoare triple {9978#true} assume 0 == ~tmp_ndt_2~0; {9978#true} is VALID [2020-07-10 15:01:57,926 INFO L280 TraceCheckUtils]: 45: Hoare triple {9978#true} ~returnVal2~0 := 0; {10029#(<= IofCallDriver_~returnVal2~0 0)} is VALID [2020-07-10 15:01:57,926 INFO L280 TraceCheckUtils]: 46: Hoare triple {10029#(<= IofCallDriver_~returnVal2~0 0)} assume !(~s~0 == ~NP~0); {10029#(<= IofCallDriver_~returnVal2~0 0)} is VALID [2020-07-10 15:01:57,927 INFO L280 TraceCheckUtils]: 47: Hoare triple {10029#(<= IofCallDriver_~returnVal2~0 0)} assume ~s~0 == ~MPR1~0; {10029#(<= IofCallDriver_~returnVal2~0 0)} is VALID [2020-07-10 15:01:57,928 INFO L280 TraceCheckUtils]: 48: Hoare triple {10029#(<= IofCallDriver_~returnVal2~0 0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {9979#false} is VALID [2020-07-10 15:01:57,928 INFO L280 TraceCheckUtils]: 49: Hoare triple {9979#false} #res := ~returnVal2~0; {9979#false} is VALID [2020-07-10 15:01:57,928 INFO L280 TraceCheckUtils]: 50: Hoare triple {9979#false} assume true; {9979#false} is VALID [2020-07-10 15:01:57,928 INFO L275 TraceCheckUtils]: 51: Hoare quadruple {9979#false} {9978#true} #468#return; {9979#false} is VALID [2020-07-10 15:01:57,928 INFO L280 TraceCheckUtils]: 52: Hoare triple {9979#false} assume -2147483648 <= #t~ret8 && #t~ret8 <= 2147483647;~status~0 := #t~ret8;havoc #t~ret8;~__cil_tmp23~0 := ~status~0; {9979#false} is VALID [2020-07-10 15:01:57,928 INFO L280 TraceCheckUtils]: 53: Hoare triple {9979#false} assume 259 == ~__cil_tmp23~0; {9979#false} is VALID [2020-07-10 15:01:57,929 INFO L263 TraceCheckUtils]: 54: Hoare triple {9979#false} call #t~ret9 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {9979#false} is VALID [2020-07-10 15:01:57,929 INFO L280 TraceCheckUtils]: 55: Hoare triple {9979#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {9979#false} is VALID [2020-07-10 15:01:57,929 INFO L280 TraceCheckUtils]: 56: Hoare triple {9979#false} assume !(~s~0 == ~MPR3~0); {9979#false} is VALID [2020-07-10 15:01:57,929 INFO L280 TraceCheckUtils]: 57: Hoare triple {9979#false} assume !(1 == ~customIrp~0); {9979#false} is VALID [2020-07-10 15:01:57,929 INFO L280 TraceCheckUtils]: 58: Hoare triple {9979#false} assume ~s~0 == ~MPR3~0; {9979#false} is VALID [2020-07-10 15:01:57,929 INFO L263 TraceCheckUtils]: 59: Hoare triple {9979#false} call errorFn(); {9979#false} is VALID [2020-07-10 15:01:57,930 INFO L280 TraceCheckUtils]: 60: Hoare triple {9979#false} assume !false; {9979#false} is VALID [2020-07-10 15:01:57,935 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:01:57,935 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1964118902] [2020-07-10 15:01:57,935 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:01:57,935 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2020-07-10 15:01:57,935 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1570700963] [2020-07-10 15:01:57,937 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 61 [2020-07-10 15:01:57,937 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:01:57,937 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states. [2020-07-10 15:01:58,001 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:58,001 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2020-07-10 15:01:58,001 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:01:58,001 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2020-07-10 15:01:58,002 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2020-07-10 15:01:58,002 INFO L87 Difference]: Start difference. First operand 91 states and 101 transitions. Second operand 9 states. [2020-07-10 15:01:59,014 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:59,015 INFO L93 Difference]: Finished difference Result 125 states and 141 transitions. [2020-07-10 15:01:59,015 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-10 15:01:59,015 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 61 [2020-07-10 15:01:59,016 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:01:59,016 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-10 15:01:59,017 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 129 transitions. [2020-07-10 15:01:59,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-10 15:01:59,019 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 129 transitions. [2020-07-10 15:01:59,019 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 129 transitions. [2020-07-10 15:01:59,199 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 129 edges. 129 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:59,201 INFO L225 Difference]: With dead ends: 125 [2020-07-10 15:01:59,202 INFO L226 Difference]: Without dead ends: 97 [2020-07-10 15:01:59,202 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2020-07-10 15:01:59,202 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2020-07-10 15:01:59,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 94. [2020-07-10 15:01:59,496 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:01:59,496 INFO L82 GeneralOperation]: Start isEquivalent. First operand 97 states. Second operand 94 states. [2020-07-10 15:01:59,497 INFO L74 IsIncluded]: Start isIncluded. First operand 97 states. Second operand 94 states. [2020-07-10 15:01:59,497 INFO L87 Difference]: Start difference. First operand 97 states. Second operand 94 states. [2020-07-10 15:01:59,499 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:59,499 INFO L93 Difference]: Finished difference Result 97 states and 107 transitions. [2020-07-10 15:01:59,499 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 107 transitions. [2020-07-10 15:01:59,499 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:59,500 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:59,500 INFO L74 IsIncluded]: Start isIncluded. First operand 94 states. Second operand 97 states. [2020-07-10 15:01:59,500 INFO L87 Difference]: Start difference. First operand 94 states. Second operand 97 states. [2020-07-10 15:01:59,502 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:01:59,502 INFO L93 Difference]: Finished difference Result 97 states and 107 transitions. [2020-07-10 15:01:59,502 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 107 transitions. [2020-07-10 15:01:59,503 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:01:59,503 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:01:59,503 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:01:59,503 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:01:59,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 94 states. [2020-07-10 15:01:59,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 104 transitions. [2020-07-10 15:01:59,505 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 104 transitions. Word has length 61 [2020-07-10 15:01:59,505 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:01:59,505 INFO L479 AbstractCegarLoop]: Abstraction has 94 states and 104 transitions. [2020-07-10 15:01:59,505 INFO L480 AbstractCegarLoop]: Interpolant automaton has 9 states. [2020-07-10 15:01:59,506 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 104 transitions. [2020-07-10 15:01:59,506 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2020-07-10 15:01:59,506 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:01:59,507 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:01:59,507 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-10 15:01:59,507 INFO L427 AbstractCegarLoop]: === Iteration 12 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:01:59,507 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:01:59,507 INFO L82 PathProgramCache]: Analyzing trace with hash -600882406, now seen corresponding path program 1 times [2020-07-10 15:01:59,508 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:01:59,508 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [860210083] [2020-07-10 15:01:59,508 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:01:59,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:59,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:59,627 INFO L280 TraceCheckUtils]: 0: Hoare triple {10572#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {10534#true} is VALID [2020-07-10 15:01:59,628 INFO L280 TraceCheckUtils]: 1: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,628 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {10534#true} {10534#true} #460#return; {10534#true} is VALID [2020-07-10 15:01:59,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:59,682 INFO L280 TraceCheckUtils]: 0: Hoare triple {10573#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10534#true} is VALID [2020-07-10 15:01:59,682 INFO L280 TraceCheckUtils]: 1: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,683 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {10534#true} {10534#true} #440#return; {10534#true} is VALID [2020-07-10 15:01:59,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:59,713 INFO L280 TraceCheckUtils]: 0: Hoare triple {10574#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10534#true} is VALID [2020-07-10 15:01:59,713 INFO L280 TraceCheckUtils]: 1: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,713 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {10534#true} {10534#true} #442#return; {10534#true} is VALID [2020-07-10 15:01:59,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:59,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:59,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:59,786 INFO L280 TraceCheckUtils]: 0: Hoare triple {10589#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {10534#true} is VALID [2020-07-10 15:01:59,786 INFO L280 TraceCheckUtils]: 1: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,787 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {10534#true} {10534#true} #438#return; {10534#true} is VALID [2020-07-10 15:01:59,787 INFO L280 TraceCheckUtils]: 0: Hoare triple {10589#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {10534#true} is VALID [2020-07-10 15:01:59,788 INFO L263 TraceCheckUtils]: 1: Hoare triple {10534#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {10589#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:59,788 INFO L280 TraceCheckUtils]: 2: Hoare triple {10589#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {10534#true} is VALID [2020-07-10 15:01:59,788 INFO L280 TraceCheckUtils]: 3: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,789 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {10534#true} {10534#true} #438#return; {10534#true} is VALID [2020-07-10 15:01:59,789 INFO L280 TraceCheckUtils]: 5: Hoare triple {10534#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {10534#true} is VALID [2020-07-10 15:01:59,789 INFO L280 TraceCheckUtils]: 6: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,789 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {10534#true} {10534#true} #448#return; {10534#true} is VALID [2020-07-10 15:01:59,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:01:59,817 INFO L280 TraceCheckUtils]: 0: Hoare triple {10593#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {10534#true} is VALID [2020-07-10 15:01:59,817 INFO L280 TraceCheckUtils]: 1: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,818 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {10534#true} {10534#true} #450#return; {10534#true} is VALID [2020-07-10 15:01:59,818 INFO L280 TraceCheckUtils]: 0: Hoare triple {10575#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {10534#true} is VALID [2020-07-10 15:01:59,818 INFO L280 TraceCheckUtils]: 1: Hoare triple {10534#true} assume 0 != ~compRegistered~0; {10534#true} is VALID [2020-07-10 15:01:59,819 INFO L263 TraceCheckUtils]: 2: Hoare triple {10534#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {10589#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:59,820 INFO L280 TraceCheckUtils]: 3: Hoare triple {10589#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {10534#true} is VALID [2020-07-10 15:01:59,820 INFO L263 TraceCheckUtils]: 4: Hoare triple {10534#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {10589#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:59,821 INFO L280 TraceCheckUtils]: 5: Hoare triple {10589#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {10534#true} is VALID [2020-07-10 15:01:59,821 INFO L280 TraceCheckUtils]: 6: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,821 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {10534#true} {10534#true} #438#return; {10534#true} is VALID [2020-07-10 15:01:59,821 INFO L280 TraceCheckUtils]: 8: Hoare triple {10534#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {10534#true} is VALID [2020-07-10 15:01:59,821 INFO L280 TraceCheckUtils]: 9: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,822 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {10534#true} {10534#true} #448#return; {10534#true} is VALID [2020-07-10 15:01:59,822 INFO L280 TraceCheckUtils]: 11: Hoare triple {10534#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {10534#true} is VALID [2020-07-10 15:01:59,822 INFO L263 TraceCheckUtils]: 12: Hoare triple {10534#true} call stubMoreProcessingRequired(); {10593#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:59,823 INFO L280 TraceCheckUtils]: 13: Hoare triple {10593#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {10534#true} is VALID [2020-07-10 15:01:59,823 INFO L280 TraceCheckUtils]: 14: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,823 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {10534#true} {10534#true} #450#return; {10534#true} is VALID [2020-07-10 15:01:59,823 INFO L280 TraceCheckUtils]: 16: Hoare triple {10534#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {10534#true} is VALID [2020-07-10 15:01:59,823 INFO L280 TraceCheckUtils]: 17: Hoare triple {10534#true} assume 0 == ~tmp_ndt_2~0; {10534#true} is VALID [2020-07-10 15:01:59,824 INFO L280 TraceCheckUtils]: 18: Hoare triple {10534#true} ~returnVal2~0 := 0; {10587#(<= IofCallDriver_~returnVal2~0 0)} is VALID [2020-07-10 15:01:59,825 INFO L280 TraceCheckUtils]: 19: Hoare triple {10587#(<= IofCallDriver_~returnVal2~0 0)} assume !(~s~0 == ~NP~0); {10587#(<= IofCallDriver_~returnVal2~0 0)} is VALID [2020-07-10 15:01:59,825 INFO L280 TraceCheckUtils]: 20: Hoare triple {10587#(<= IofCallDriver_~returnVal2~0 0)} assume ~s~0 == ~MPR1~0; {10587#(<= IofCallDriver_~returnVal2~0 0)} is VALID [2020-07-10 15:01:59,826 INFO L280 TraceCheckUtils]: 21: Hoare triple {10587#(<= IofCallDriver_~returnVal2~0 0)} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {10587#(<= IofCallDriver_~returnVal2~0 0)} is VALID [2020-07-10 15:01:59,826 INFO L280 TraceCheckUtils]: 22: Hoare triple {10587#(<= IofCallDriver_~returnVal2~0 0)} #res := ~returnVal2~0; {10588#(<= |IofCallDriver_#res| 0)} is VALID [2020-07-10 15:01:59,827 INFO L280 TraceCheckUtils]: 23: Hoare triple {10588#(<= |IofCallDriver_#res| 0)} assume true; {10588#(<= |IofCallDriver_#res| 0)} is VALID [2020-07-10 15:01:59,828 INFO L275 TraceCheckUtils]: 24: Hoare quadruple {10588#(<= |IofCallDriver_#res| 0)} {10534#true} #468#return; {10570#(not (= 259 |KbFilter_PnP_#t~ret8|))} is VALID [2020-07-10 15:01:59,830 INFO L263 TraceCheckUtils]: 0: Hoare triple {10534#true} call ULTIMATE.init(); {10572#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:59,831 INFO L280 TraceCheckUtils]: 1: Hoare triple {10572#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {10534#true} is VALID [2020-07-10 15:01:59,831 INFO L280 TraceCheckUtils]: 2: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,831 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {10534#true} {10534#true} #460#return; {10534#true} is VALID [2020-07-10 15:01:59,831 INFO L263 TraceCheckUtils]: 4: Hoare triple {10534#true} call #t~ret31 := main(); {10534#true} is VALID [2020-07-10 15:01:59,831 INFO L280 TraceCheckUtils]: 5: Hoare triple {10534#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {10534#true} is VALID [2020-07-10 15:01:59,833 INFO L263 TraceCheckUtils]: 6: Hoare triple {10534#true} call _BLAST_init(); {10573#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:01:59,833 INFO L280 TraceCheckUtils]: 7: Hoare triple {10573#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10534#true} is VALID [2020-07-10 15:01:59,833 INFO L280 TraceCheckUtils]: 8: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,833 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {10534#true} {10534#true} #440#return; {10534#true} is VALID [2020-07-10 15:01:59,834 INFO L280 TraceCheckUtils]: 10: Hoare triple {10534#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {10534#true} is VALID [2020-07-10 15:01:59,834 INFO L280 TraceCheckUtils]: 11: Hoare triple {10534#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {10534#true} is VALID [2020-07-10 15:01:59,835 INFO L263 TraceCheckUtils]: 12: Hoare triple {10534#true} call stub_driver_init(); {10574#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:59,835 INFO L280 TraceCheckUtils]: 13: Hoare triple {10574#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10534#true} is VALID [2020-07-10 15:01:59,835 INFO L280 TraceCheckUtils]: 14: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,835 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {10534#true} {10534#true} #442#return; {10534#true} is VALID [2020-07-10 15:01:59,835 INFO L280 TraceCheckUtils]: 16: Hoare triple {10534#true} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {10534#true} is VALID [2020-07-10 15:01:59,836 INFO L280 TraceCheckUtils]: 17: Hoare triple {10534#true} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {10534#true} is VALID [2020-07-10 15:01:59,836 INFO L280 TraceCheckUtils]: 18: Hoare triple {10534#true} assume 3 == ~tmp_ndt_1~0; {10534#true} is VALID [2020-07-10 15:01:59,836 INFO L263 TraceCheckUtils]: 19: Hoare triple {10534#true} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {10534#true} is VALID [2020-07-10 15:01:59,836 INFO L280 TraceCheckUtils]: 20: Hoare triple {10534#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {10534#true} is VALID [2020-07-10 15:01:59,836 INFO L280 TraceCheckUtils]: 21: Hoare triple {10534#true} assume 0 == ~irpStack__MinorFunction~0; {10534#true} is VALID [2020-07-10 15:01:59,837 INFO L280 TraceCheckUtils]: 22: Hoare triple {10534#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {10534#true} is VALID [2020-07-10 15:01:59,837 INFO L280 TraceCheckUtils]: 23: Hoare triple {10534#true} assume !(~s~0 != ~NP~0); {10534#true} is VALID [2020-07-10 15:01:59,837 INFO L280 TraceCheckUtils]: 24: Hoare triple {10534#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {10534#true} is VALID [2020-07-10 15:01:59,837 INFO L280 TraceCheckUtils]: 25: Hoare triple {10534#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Control~0 := 224; {10534#true} is VALID [2020-07-10 15:01:59,838 INFO L263 TraceCheckUtils]: 26: Hoare triple {10534#true} call #t~ret8 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {10575#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:01:59,838 INFO L280 TraceCheckUtils]: 27: Hoare triple {10575#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {10534#true} is VALID [2020-07-10 15:01:59,838 INFO L280 TraceCheckUtils]: 28: Hoare triple {10534#true} assume 0 != ~compRegistered~0; {10534#true} is VALID [2020-07-10 15:01:59,839 INFO L263 TraceCheckUtils]: 29: Hoare triple {10534#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {10589#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:59,840 INFO L280 TraceCheckUtils]: 30: Hoare triple {10589#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {10534#true} is VALID [2020-07-10 15:01:59,840 INFO L263 TraceCheckUtils]: 31: Hoare triple {10534#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {10589#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:01:59,841 INFO L280 TraceCheckUtils]: 32: Hoare triple {10589#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {10534#true} is VALID [2020-07-10 15:01:59,841 INFO L280 TraceCheckUtils]: 33: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,841 INFO L275 TraceCheckUtils]: 34: Hoare quadruple {10534#true} {10534#true} #438#return; {10534#true} is VALID [2020-07-10 15:01:59,841 INFO L280 TraceCheckUtils]: 35: Hoare triple {10534#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {10534#true} is VALID [2020-07-10 15:01:59,841 INFO L280 TraceCheckUtils]: 36: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,841 INFO L275 TraceCheckUtils]: 37: Hoare quadruple {10534#true} {10534#true} #448#return; {10534#true} is VALID [2020-07-10 15:01:59,842 INFO L280 TraceCheckUtils]: 38: Hoare triple {10534#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {10534#true} is VALID [2020-07-10 15:01:59,843 INFO L263 TraceCheckUtils]: 39: Hoare triple {10534#true} call stubMoreProcessingRequired(); {10593#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:01:59,843 INFO L280 TraceCheckUtils]: 40: Hoare triple {10593#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {10534#true} is VALID [2020-07-10 15:01:59,844 INFO L280 TraceCheckUtils]: 41: Hoare triple {10534#true} assume true; {10534#true} is VALID [2020-07-10 15:01:59,844 INFO L275 TraceCheckUtils]: 42: Hoare quadruple {10534#true} {10534#true} #450#return; {10534#true} is VALID [2020-07-10 15:01:59,844 INFO L280 TraceCheckUtils]: 43: Hoare triple {10534#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {10534#true} is VALID [2020-07-10 15:01:59,844 INFO L280 TraceCheckUtils]: 44: Hoare triple {10534#true} assume 0 == ~tmp_ndt_2~0; {10534#true} is VALID [2020-07-10 15:01:59,845 INFO L280 TraceCheckUtils]: 45: Hoare triple {10534#true} ~returnVal2~0 := 0; {10587#(<= IofCallDriver_~returnVal2~0 0)} is VALID [2020-07-10 15:01:59,845 INFO L280 TraceCheckUtils]: 46: Hoare triple {10587#(<= IofCallDriver_~returnVal2~0 0)} assume !(~s~0 == ~NP~0); {10587#(<= IofCallDriver_~returnVal2~0 0)} is VALID [2020-07-10 15:01:59,846 INFO L280 TraceCheckUtils]: 47: Hoare triple {10587#(<= IofCallDriver_~returnVal2~0 0)} assume ~s~0 == ~MPR1~0; {10587#(<= IofCallDriver_~returnVal2~0 0)} is VALID [2020-07-10 15:01:59,846 INFO L280 TraceCheckUtils]: 48: Hoare triple {10587#(<= IofCallDriver_~returnVal2~0 0)} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {10587#(<= IofCallDriver_~returnVal2~0 0)} is VALID [2020-07-10 15:01:59,847 INFO L280 TraceCheckUtils]: 49: Hoare triple {10587#(<= IofCallDriver_~returnVal2~0 0)} #res := ~returnVal2~0; {10588#(<= |IofCallDriver_#res| 0)} is VALID [2020-07-10 15:01:59,847 INFO L280 TraceCheckUtils]: 50: Hoare triple {10588#(<= |IofCallDriver_#res| 0)} assume true; {10588#(<= |IofCallDriver_#res| 0)} is VALID [2020-07-10 15:01:59,849 INFO L275 TraceCheckUtils]: 51: Hoare quadruple {10588#(<= |IofCallDriver_#res| 0)} {10534#true} #468#return; {10570#(not (= 259 |KbFilter_PnP_#t~ret8|))} is VALID [2020-07-10 15:01:59,849 INFO L280 TraceCheckUtils]: 52: Hoare triple {10570#(not (= 259 |KbFilter_PnP_#t~ret8|))} assume -2147483648 <= #t~ret8 && #t~ret8 <= 2147483647;~status~0 := #t~ret8;havoc #t~ret8;~__cil_tmp23~0 := ~status~0; {10571#(not (= 259 KbFilter_PnP_~__cil_tmp23~0))} is VALID [2020-07-10 15:01:59,850 INFO L280 TraceCheckUtils]: 53: Hoare triple {10571#(not (= 259 KbFilter_PnP_~__cil_tmp23~0))} assume 259 == ~__cil_tmp23~0; {10535#false} is VALID [2020-07-10 15:01:59,850 INFO L263 TraceCheckUtils]: 54: Hoare triple {10535#false} call #t~ret9 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {10535#false} is VALID [2020-07-10 15:01:59,850 INFO L280 TraceCheckUtils]: 55: Hoare triple {10535#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {10535#false} is VALID [2020-07-10 15:01:59,850 INFO L280 TraceCheckUtils]: 56: Hoare triple {10535#false} assume !(~s~0 == ~MPR3~0); {10535#false} is VALID [2020-07-10 15:01:59,850 INFO L280 TraceCheckUtils]: 57: Hoare triple {10535#false} assume !(1 == ~customIrp~0); {10535#false} is VALID [2020-07-10 15:01:59,851 INFO L280 TraceCheckUtils]: 58: Hoare triple {10535#false} assume ~s~0 == ~MPR3~0; {10535#false} is VALID [2020-07-10 15:01:59,851 INFO L263 TraceCheckUtils]: 59: Hoare triple {10535#false} call errorFn(); {10535#false} is VALID [2020-07-10 15:01:59,851 INFO L280 TraceCheckUtils]: 60: Hoare triple {10535#false} assume !false; {10535#false} is VALID [2020-07-10 15:01:59,856 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:01:59,856 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [860210083] [2020-07-10 15:01:59,856 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:01:59,856 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2020-07-10 15:01:59,857 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2004540754] [2020-07-10 15:01:59,857 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 61 [2020-07-10 15:01:59,857 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:01:59,858 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states. [2020-07-10 15:01:59,930 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:01:59,930 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2020-07-10 15:01:59,930 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:01:59,931 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2020-07-10 15:01:59,931 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2020-07-10 15:01:59,931 INFO L87 Difference]: Start difference. First operand 94 states and 104 transitions. Second operand 12 states. [2020-07-10 15:02:01,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:01,301 INFO L93 Difference]: Finished difference Result 112 states and 124 transitions. [2020-07-10 15:02:01,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2020-07-10 15:02:01,301 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 61 [2020-07-10 15:02:01,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:02:01,301 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12 states. [2020-07-10 15:02:01,303 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 112 transitions. [2020-07-10 15:02:01,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12 states. [2020-07-10 15:02:01,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 112 transitions. [2020-07-10 15:02:01,304 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 112 transitions. [2020-07-10 15:02:01,465 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 112 edges. 112 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:02:01,467 INFO L225 Difference]: With dead ends: 112 [2020-07-10 15:02:01,467 INFO L226 Difference]: Without dead ends: 93 [2020-07-10 15:02:01,468 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=39, Invalid=117, Unknown=0, NotChecked=0, Total=156 [2020-07-10 15:02:01,468 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2020-07-10 15:02:01,770 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 89. [2020-07-10 15:02:01,770 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:02:01,770 INFO L82 GeneralOperation]: Start isEquivalent. First operand 93 states. Second operand 89 states. [2020-07-10 15:02:01,770 INFO L74 IsIncluded]: Start isIncluded. First operand 93 states. Second operand 89 states. [2020-07-10 15:02:01,771 INFO L87 Difference]: Start difference. First operand 93 states. Second operand 89 states. [2020-07-10 15:02:01,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:01,773 INFO L93 Difference]: Finished difference Result 93 states and 103 transitions. [2020-07-10 15:02:01,773 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 103 transitions. [2020-07-10 15:02:01,773 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:01,773 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:02:01,773 INFO L74 IsIncluded]: Start isIncluded. First operand 89 states. Second operand 93 states. [2020-07-10 15:02:01,773 INFO L87 Difference]: Start difference. First operand 89 states. Second operand 93 states. [2020-07-10 15:02:01,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:01,775 INFO L93 Difference]: Finished difference Result 93 states and 103 transitions. [2020-07-10 15:02:01,775 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 103 transitions. [2020-07-10 15:02:01,776 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:01,776 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:02:01,776 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:02:01,776 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:02:01,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 89 states. [2020-07-10 15:02:01,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 97 transitions. [2020-07-10 15:02:01,778 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 97 transitions. Word has length 61 [2020-07-10 15:02:01,778 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:02:01,778 INFO L479 AbstractCegarLoop]: Abstraction has 89 states and 97 transitions. [2020-07-10 15:02:01,778 INFO L480 AbstractCegarLoop]: Interpolant automaton has 12 states. [2020-07-10 15:02:01,778 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 97 transitions. [2020-07-10 15:02:01,779 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2020-07-10 15:02:01,779 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:02:01,779 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:02:01,779 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-10 15:02:01,780 INFO L427 AbstractCegarLoop]: === Iteration 13 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:02:01,780 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:02:01,780 INFO L82 PathProgramCache]: Analyzing trace with hash -673462309, now seen corresponding path program 1 times [2020-07-10 15:02:01,780 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:02:01,780 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1551945017] [2020-07-10 15:02:01,781 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:02:01,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:01,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:01,883 INFO L280 TraceCheckUtils]: 0: Hoare triple {11100#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {11062#true} is VALID [2020-07-10 15:02:01,883 INFO L280 TraceCheckUtils]: 1: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:01,883 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {11062#true} {11062#true} #460#return; {11062#true} is VALID [2020-07-10 15:02:01,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:01,932 INFO L280 TraceCheckUtils]: 0: Hoare triple {11101#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11062#true} is VALID [2020-07-10 15:02:01,932 INFO L280 TraceCheckUtils]: 1: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:01,933 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {11062#true} {11062#true} #440#return; {11062#true} is VALID [2020-07-10 15:02:01,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:01,962 INFO L280 TraceCheckUtils]: 0: Hoare triple {11102#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11062#true} is VALID [2020-07-10 15:02:01,963 INFO L280 TraceCheckUtils]: 1: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:01,963 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {11062#true} {11062#true} #442#return; {11062#true} is VALID [2020-07-10 15:02:01,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:01,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:02,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:02,005 INFO L280 TraceCheckUtils]: 0: Hoare triple {11115#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {11062#true} is VALID [2020-07-10 15:02:02,005 INFO L280 TraceCheckUtils]: 1: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,005 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {11062#true} {11062#true} #438#return; {11062#true} is VALID [2020-07-10 15:02:02,005 INFO L280 TraceCheckUtils]: 0: Hoare triple {11115#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {11062#true} is VALID [2020-07-10 15:02:02,006 INFO L263 TraceCheckUtils]: 1: Hoare triple {11062#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {11115#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:02,006 INFO L280 TraceCheckUtils]: 2: Hoare triple {11115#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {11062#true} is VALID [2020-07-10 15:02:02,007 INFO L280 TraceCheckUtils]: 3: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,007 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {11062#true} {11062#true} #438#return; {11062#true} is VALID [2020-07-10 15:02:02,007 INFO L280 TraceCheckUtils]: 5: Hoare triple {11062#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {11062#true} is VALID [2020-07-10 15:02:02,007 INFO L280 TraceCheckUtils]: 6: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,007 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {11062#true} {11062#true} #448#return; {11062#true} is VALID [2020-07-10 15:02:02,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:02,020 INFO L280 TraceCheckUtils]: 0: Hoare triple {11119#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {11062#true} is VALID [2020-07-10 15:02:02,020 INFO L280 TraceCheckUtils]: 1: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,020 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {11062#true} {11062#true} #450#return; {11062#true} is VALID [2020-07-10 15:02:02,021 INFO L280 TraceCheckUtils]: 0: Hoare triple {11103#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {11062#true} is VALID [2020-07-10 15:02:02,021 INFO L280 TraceCheckUtils]: 1: Hoare triple {11062#true} assume 0 != ~compRegistered~0; {11062#true} is VALID [2020-07-10 15:02:02,022 INFO L263 TraceCheckUtils]: 2: Hoare triple {11062#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {11115#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:02,022 INFO L280 TraceCheckUtils]: 3: Hoare triple {11115#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {11062#true} is VALID [2020-07-10 15:02:02,023 INFO L263 TraceCheckUtils]: 4: Hoare triple {11062#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {11115#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:02,023 INFO L280 TraceCheckUtils]: 5: Hoare triple {11115#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {11062#true} is VALID [2020-07-10 15:02:02,023 INFO L280 TraceCheckUtils]: 6: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,024 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {11062#true} {11062#true} #438#return; {11062#true} is VALID [2020-07-10 15:02:02,024 INFO L280 TraceCheckUtils]: 8: Hoare triple {11062#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {11062#true} is VALID [2020-07-10 15:02:02,024 INFO L280 TraceCheckUtils]: 9: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,024 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {11062#true} {11062#true} #448#return; {11062#true} is VALID [2020-07-10 15:02:02,024 INFO L280 TraceCheckUtils]: 11: Hoare triple {11062#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {11062#true} is VALID [2020-07-10 15:02:02,025 INFO L263 TraceCheckUtils]: 12: Hoare triple {11062#true} call stubMoreProcessingRequired(); {11119#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:02:02,025 INFO L280 TraceCheckUtils]: 13: Hoare triple {11119#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {11062#true} is VALID [2020-07-10 15:02:02,025 INFO L280 TraceCheckUtils]: 14: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,025 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {11062#true} {11062#true} #450#return; {11062#true} is VALID [2020-07-10 15:02:02,026 INFO L280 TraceCheckUtils]: 16: Hoare triple {11062#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {11062#true} is VALID [2020-07-10 15:02:02,026 INFO L280 TraceCheckUtils]: 17: Hoare triple {11062#true} assume !(0 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_3~0 := #t~nondet27;havoc #t~nondet27; {11062#true} is VALID [2020-07-10 15:02:02,026 INFO L280 TraceCheckUtils]: 18: Hoare triple {11062#true} assume !(1 == ~tmp_ndt_3~0); {11062#true} is VALID [2020-07-10 15:02:02,026 INFO L280 TraceCheckUtils]: 19: Hoare triple {11062#true} ~returnVal2~0 := 259; {11062#true} is VALID [2020-07-10 15:02:02,026 INFO L280 TraceCheckUtils]: 20: Hoare triple {11062#true} assume !(~s~0 == ~NP~0); {11062#true} is VALID [2020-07-10 15:02:02,026 INFO L280 TraceCheckUtils]: 21: Hoare triple {11062#true} assume ~s~0 == ~MPR1~0; {11062#true} is VALID [2020-07-10 15:02:02,027 INFO L280 TraceCheckUtils]: 22: Hoare triple {11062#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {11062#true} is VALID [2020-07-10 15:02:02,027 INFO L280 TraceCheckUtils]: 23: Hoare triple {11062#true} #res := ~returnVal2~0; {11062#true} is VALID [2020-07-10 15:02:02,027 INFO L280 TraceCheckUtils]: 24: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,027 INFO L275 TraceCheckUtils]: 25: Hoare quadruple {11062#true} {11062#true} #468#return; {11062#true} is VALID [2020-07-10 15:02:02,029 INFO L263 TraceCheckUtils]: 0: Hoare triple {11062#true} call ULTIMATE.init(); {11100#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:02:02,030 INFO L280 TraceCheckUtils]: 1: Hoare triple {11100#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {11062#true} is VALID [2020-07-10 15:02:02,030 INFO L280 TraceCheckUtils]: 2: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,030 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {11062#true} {11062#true} #460#return; {11062#true} is VALID [2020-07-10 15:02:02,030 INFO L263 TraceCheckUtils]: 4: Hoare triple {11062#true} call #t~ret31 := main(); {11062#true} is VALID [2020-07-10 15:02:02,030 INFO L280 TraceCheckUtils]: 5: Hoare triple {11062#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {11062#true} is VALID [2020-07-10 15:02:02,032 INFO L263 TraceCheckUtils]: 6: Hoare triple {11062#true} call _BLAST_init(); {11101#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:02:02,032 INFO L280 TraceCheckUtils]: 7: Hoare triple {11101#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11062#true} is VALID [2020-07-10 15:02:02,032 INFO L280 TraceCheckUtils]: 8: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,032 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {11062#true} {11062#true} #440#return; {11062#true} is VALID [2020-07-10 15:02:02,033 INFO L280 TraceCheckUtils]: 10: Hoare triple {11062#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {11062#true} is VALID [2020-07-10 15:02:02,033 INFO L280 TraceCheckUtils]: 11: Hoare triple {11062#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {11062#true} is VALID [2020-07-10 15:02:02,034 INFO L263 TraceCheckUtils]: 12: Hoare triple {11062#true} call stub_driver_init(); {11102#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:02:02,034 INFO L280 TraceCheckUtils]: 13: Hoare triple {11102#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11062#true} is VALID [2020-07-10 15:02:02,034 INFO L280 TraceCheckUtils]: 14: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,034 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {11062#true} {11062#true} #442#return; {11062#true} is VALID [2020-07-10 15:02:02,035 INFO L280 TraceCheckUtils]: 16: Hoare triple {11062#true} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {11062#true} is VALID [2020-07-10 15:02:02,035 INFO L280 TraceCheckUtils]: 17: Hoare triple {11062#true} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {11062#true} is VALID [2020-07-10 15:02:02,035 INFO L280 TraceCheckUtils]: 18: Hoare triple {11062#true} assume 3 == ~tmp_ndt_1~0; {11062#true} is VALID [2020-07-10 15:02:02,035 INFO L263 TraceCheckUtils]: 19: Hoare triple {11062#true} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {11062#true} is VALID [2020-07-10 15:02:02,035 INFO L280 TraceCheckUtils]: 20: Hoare triple {11062#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {11062#true} is VALID [2020-07-10 15:02:02,035 INFO L280 TraceCheckUtils]: 21: Hoare triple {11062#true} assume 0 == ~irpStack__MinorFunction~0; {11062#true} is VALID [2020-07-10 15:02:02,036 INFO L280 TraceCheckUtils]: 22: Hoare triple {11062#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {11062#true} is VALID [2020-07-10 15:02:02,036 INFO L280 TraceCheckUtils]: 23: Hoare triple {11062#true} assume !(~s~0 != ~NP~0); {11062#true} is VALID [2020-07-10 15:02:02,036 INFO L280 TraceCheckUtils]: 24: Hoare triple {11062#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {11062#true} is VALID [2020-07-10 15:02:02,036 INFO L280 TraceCheckUtils]: 25: Hoare triple {11062#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Control~0 := 224; {11062#true} is VALID [2020-07-10 15:02:02,037 INFO L263 TraceCheckUtils]: 26: Hoare triple {11062#true} call #t~ret8 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {11103#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:02:02,037 INFO L280 TraceCheckUtils]: 27: Hoare triple {11103#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {11062#true} is VALID [2020-07-10 15:02:02,038 INFO L280 TraceCheckUtils]: 28: Hoare triple {11062#true} assume 0 != ~compRegistered~0; {11062#true} is VALID [2020-07-10 15:02:02,039 INFO L263 TraceCheckUtils]: 29: Hoare triple {11062#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {11115#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:02,039 INFO L280 TraceCheckUtils]: 30: Hoare triple {11115#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {11062#true} is VALID [2020-07-10 15:02:02,040 INFO L263 TraceCheckUtils]: 31: Hoare triple {11062#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {11115#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:02,040 INFO L280 TraceCheckUtils]: 32: Hoare triple {11115#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {11062#true} is VALID [2020-07-10 15:02:02,040 INFO L280 TraceCheckUtils]: 33: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,041 INFO L275 TraceCheckUtils]: 34: Hoare quadruple {11062#true} {11062#true} #438#return; {11062#true} is VALID [2020-07-10 15:02:02,041 INFO L280 TraceCheckUtils]: 35: Hoare triple {11062#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {11062#true} is VALID [2020-07-10 15:02:02,041 INFO L280 TraceCheckUtils]: 36: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,041 INFO L275 TraceCheckUtils]: 37: Hoare quadruple {11062#true} {11062#true} #448#return; {11062#true} is VALID [2020-07-10 15:02:02,042 INFO L280 TraceCheckUtils]: 38: Hoare triple {11062#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {11062#true} is VALID [2020-07-10 15:02:02,043 INFO L263 TraceCheckUtils]: 39: Hoare triple {11062#true} call stubMoreProcessingRequired(); {11119#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:02:02,043 INFO L280 TraceCheckUtils]: 40: Hoare triple {11119#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {11062#true} is VALID [2020-07-10 15:02:02,043 INFO L280 TraceCheckUtils]: 41: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,043 INFO L275 TraceCheckUtils]: 42: Hoare quadruple {11062#true} {11062#true} #450#return; {11062#true} is VALID [2020-07-10 15:02:02,043 INFO L280 TraceCheckUtils]: 43: Hoare triple {11062#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {11062#true} is VALID [2020-07-10 15:02:02,044 INFO L280 TraceCheckUtils]: 44: Hoare triple {11062#true} assume !(0 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_3~0 := #t~nondet27;havoc #t~nondet27; {11062#true} is VALID [2020-07-10 15:02:02,044 INFO L280 TraceCheckUtils]: 45: Hoare triple {11062#true} assume !(1 == ~tmp_ndt_3~0); {11062#true} is VALID [2020-07-10 15:02:02,044 INFO L280 TraceCheckUtils]: 46: Hoare triple {11062#true} ~returnVal2~0 := 259; {11062#true} is VALID [2020-07-10 15:02:02,044 INFO L280 TraceCheckUtils]: 47: Hoare triple {11062#true} assume !(~s~0 == ~NP~0); {11062#true} is VALID [2020-07-10 15:02:02,044 INFO L280 TraceCheckUtils]: 48: Hoare triple {11062#true} assume ~s~0 == ~MPR1~0; {11062#true} is VALID [2020-07-10 15:02:02,045 INFO L280 TraceCheckUtils]: 49: Hoare triple {11062#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {11062#true} is VALID [2020-07-10 15:02:02,045 INFO L280 TraceCheckUtils]: 50: Hoare triple {11062#true} #res := ~returnVal2~0; {11062#true} is VALID [2020-07-10 15:02:02,045 INFO L280 TraceCheckUtils]: 51: Hoare triple {11062#true} assume true; {11062#true} is VALID [2020-07-10 15:02:02,045 INFO L275 TraceCheckUtils]: 52: Hoare quadruple {11062#true} {11062#true} #468#return; {11062#true} is VALID [2020-07-10 15:02:02,045 INFO L280 TraceCheckUtils]: 53: Hoare triple {11062#true} assume -2147483648 <= #t~ret8 && #t~ret8 <= 2147483647;~status~0 := #t~ret8;havoc #t~ret8;~__cil_tmp23~0 := ~status~0; {11062#true} is VALID [2020-07-10 15:02:02,046 INFO L280 TraceCheckUtils]: 54: Hoare triple {11062#true} assume 259 == ~__cil_tmp23~0; {11062#true} is VALID [2020-07-10 15:02:02,046 INFO L263 TraceCheckUtils]: 55: Hoare triple {11062#true} call #t~ret9 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {11062#true} is VALID [2020-07-10 15:02:02,046 INFO L280 TraceCheckUtils]: 56: Hoare triple {11062#true} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {11062#true} is VALID [2020-07-10 15:02:02,047 INFO L280 TraceCheckUtils]: 57: Hoare triple {11062#true} assume !(~s~0 == ~MPR3~0); {11099#(not (= ~MPR3~0 ~s~0))} is VALID [2020-07-10 15:02:02,047 INFO L280 TraceCheckUtils]: 58: Hoare triple {11099#(not (= ~MPR3~0 ~s~0))} assume !(1 == ~customIrp~0); {11099#(not (= ~MPR3~0 ~s~0))} is VALID [2020-07-10 15:02:02,048 INFO L280 TraceCheckUtils]: 59: Hoare triple {11099#(not (= ~MPR3~0 ~s~0))} assume ~s~0 == ~MPR3~0; {11063#false} is VALID [2020-07-10 15:02:02,048 INFO L263 TraceCheckUtils]: 60: Hoare triple {11063#false} call errorFn(); {11063#false} is VALID [2020-07-10 15:02:02,048 INFO L280 TraceCheckUtils]: 61: Hoare triple {11063#false} assume !false; {11063#false} is VALID [2020-07-10 15:02:02,054 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:02:02,055 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1551945017] [2020-07-10 15:02:02,055 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:02:02,055 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2020-07-10 15:02:02,055 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1950893269] [2020-07-10 15:02:02,056 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 62 [2020-07-10 15:02:02,056 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:02:02,056 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states. [2020-07-10 15:02:02,131 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 62 edges. 62 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:02:02,132 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2020-07-10 15:02:02,132 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:02:02,132 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2020-07-10 15:02:02,132 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2020-07-10 15:02:02,133 INFO L87 Difference]: Start difference. First operand 89 states and 97 transitions. Second operand 9 states. [2020-07-10 15:02:03,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:03,071 INFO L93 Difference]: Finished difference Result 105 states and 114 transitions. [2020-07-10 15:02:03,072 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-10 15:02:03,072 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 62 [2020-07-10 15:02:03,072 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:02:03,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-10 15:02:03,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 100 transitions. [2020-07-10 15:02:03,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-10 15:02:03,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 100 transitions. [2020-07-10 15:02:03,075 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 100 transitions. [2020-07-10 15:02:03,229 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 100 edges. 100 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:02:03,231 INFO L225 Difference]: With dead ends: 105 [2020-07-10 15:02:03,231 INFO L226 Difference]: Without dead ends: 100 [2020-07-10 15:02:03,232 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=38, Invalid=52, Unknown=0, NotChecked=0, Total=90 [2020-07-10 15:02:03,233 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2020-07-10 15:02:03,525 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 91. [2020-07-10 15:02:03,525 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:02:03,525 INFO L82 GeneralOperation]: Start isEquivalent. First operand 100 states. Second operand 91 states. [2020-07-10 15:02:03,525 INFO L74 IsIncluded]: Start isIncluded. First operand 100 states. Second operand 91 states. [2020-07-10 15:02:03,526 INFO L87 Difference]: Start difference. First operand 100 states. Second operand 91 states. [2020-07-10 15:02:03,528 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:03,528 INFO L93 Difference]: Finished difference Result 100 states and 108 transitions. [2020-07-10 15:02:03,528 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 108 transitions. [2020-07-10 15:02:03,528 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:03,529 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:02:03,529 INFO L74 IsIncluded]: Start isIncluded. First operand 91 states. Second operand 100 states. [2020-07-10 15:02:03,529 INFO L87 Difference]: Start difference. First operand 91 states. Second operand 100 states. [2020-07-10 15:02:03,531 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:03,531 INFO L93 Difference]: Finished difference Result 100 states and 108 transitions. [2020-07-10 15:02:03,531 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 108 transitions. [2020-07-10 15:02:03,531 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:03,532 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:02:03,532 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:02:03,532 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:02:03,532 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 91 states. [2020-07-10 15:02:03,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 98 transitions. [2020-07-10 15:02:03,534 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 98 transitions. Word has length 62 [2020-07-10 15:02:03,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:02:03,534 INFO L479 AbstractCegarLoop]: Abstraction has 91 states and 98 transitions. [2020-07-10 15:02:03,534 INFO L480 AbstractCegarLoop]: Interpolant automaton has 9 states. [2020-07-10 15:02:03,534 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 98 transitions. [2020-07-10 15:02:03,535 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2020-07-10 15:02:03,535 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:02:03,535 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:02:03,536 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2020-07-10 15:02:03,536 INFO L427 AbstractCegarLoop]: === Iteration 14 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:02:03,536 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:02:03,536 INFO L82 PathProgramCache]: Analyzing trace with hash 475938380, now seen corresponding path program 1 times [2020-07-10 15:02:03,536 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:02:03,537 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [585845603] [2020-07-10 15:02:03,537 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:02:03,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:03,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:03,664 INFO L280 TraceCheckUtils]: 0: Hoare triple {11636#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {11597#true} is VALID [2020-07-10 15:02:03,664 INFO L280 TraceCheckUtils]: 1: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,664 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {11597#true} {11597#true} #460#return; {11597#true} is VALID [2020-07-10 15:02:03,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:03,721 INFO L280 TraceCheckUtils]: 0: Hoare triple {11637#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11597#true} is VALID [2020-07-10 15:02:03,722 INFO L280 TraceCheckUtils]: 1: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,722 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {11597#true} {11597#true} #440#return; {11597#true} is VALID [2020-07-10 15:02:03,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:03,756 INFO L280 TraceCheckUtils]: 0: Hoare triple {11638#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11597#true} is VALID [2020-07-10 15:02:03,756 INFO L280 TraceCheckUtils]: 1: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,757 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {11597#true} {11597#true} #442#return; {11597#true} is VALID [2020-07-10 15:02:03,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:03,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:03,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:03,836 INFO L280 TraceCheckUtils]: 0: Hoare triple {11653#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {11597#true} is VALID [2020-07-10 15:02:03,836 INFO L280 TraceCheckUtils]: 1: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,836 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {11597#true} {11597#true} #438#return; {11597#true} is VALID [2020-07-10 15:02:03,836 INFO L280 TraceCheckUtils]: 0: Hoare triple {11653#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {11597#true} is VALID [2020-07-10 15:02:03,837 INFO L263 TraceCheckUtils]: 1: Hoare triple {11597#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {11653#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:03,838 INFO L280 TraceCheckUtils]: 2: Hoare triple {11653#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {11597#true} is VALID [2020-07-10 15:02:03,838 INFO L280 TraceCheckUtils]: 3: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,838 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {11597#true} {11597#true} #438#return; {11597#true} is VALID [2020-07-10 15:02:03,838 INFO L280 TraceCheckUtils]: 5: Hoare triple {11597#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {11597#true} is VALID [2020-07-10 15:02:03,838 INFO L280 TraceCheckUtils]: 6: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,839 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {11597#true} {11597#true} #448#return; {11597#true} is VALID [2020-07-10 15:02:03,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:03,858 INFO L280 TraceCheckUtils]: 0: Hoare triple {11657#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {11597#true} is VALID [2020-07-10 15:02:03,858 INFO L280 TraceCheckUtils]: 1: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,859 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {11597#true} {11597#true} #450#return; {11597#true} is VALID [2020-07-10 15:02:03,859 INFO L280 TraceCheckUtils]: 0: Hoare triple {11639#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {11597#true} is VALID [2020-07-10 15:02:03,859 INFO L280 TraceCheckUtils]: 1: Hoare triple {11597#true} assume 0 != ~compRegistered~0; {11597#true} is VALID [2020-07-10 15:02:03,860 INFO L263 TraceCheckUtils]: 2: Hoare triple {11597#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {11653#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:03,860 INFO L280 TraceCheckUtils]: 3: Hoare triple {11653#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {11597#true} is VALID [2020-07-10 15:02:03,861 INFO L263 TraceCheckUtils]: 4: Hoare triple {11597#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {11653#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:03,861 INFO L280 TraceCheckUtils]: 5: Hoare triple {11653#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {11597#true} is VALID [2020-07-10 15:02:03,862 INFO L280 TraceCheckUtils]: 6: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,862 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {11597#true} {11597#true} #438#return; {11597#true} is VALID [2020-07-10 15:02:03,862 INFO L280 TraceCheckUtils]: 8: Hoare triple {11597#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {11597#true} is VALID [2020-07-10 15:02:03,862 INFO L280 TraceCheckUtils]: 9: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,862 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {11597#true} {11597#true} #448#return; {11597#true} is VALID [2020-07-10 15:02:03,863 INFO L280 TraceCheckUtils]: 11: Hoare triple {11597#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {11597#true} is VALID [2020-07-10 15:02:03,863 INFO L263 TraceCheckUtils]: 12: Hoare triple {11597#true} call stubMoreProcessingRequired(); {11657#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:02:03,863 INFO L280 TraceCheckUtils]: 13: Hoare triple {11657#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {11597#true} is VALID [2020-07-10 15:02:03,864 INFO L280 TraceCheckUtils]: 14: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,864 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {11597#true} {11597#true} #450#return; {11597#true} is VALID [2020-07-10 15:02:03,864 INFO L280 TraceCheckUtils]: 16: Hoare triple {11597#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {11597#true} is VALID [2020-07-10 15:02:03,864 INFO L280 TraceCheckUtils]: 17: Hoare triple {11597#true} assume !(0 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_3~0 := #t~nondet27;havoc #t~nondet27; {11597#true} is VALID [2020-07-10 15:02:03,864 INFO L280 TraceCheckUtils]: 18: Hoare triple {11597#true} assume !(1 == ~tmp_ndt_3~0); {11597#true} is VALID [2020-07-10 15:02:03,865 INFO L280 TraceCheckUtils]: 19: Hoare triple {11597#true} ~returnVal2~0 := 259; {11651#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2020-07-10 15:02:03,866 INFO L280 TraceCheckUtils]: 20: Hoare triple {11651#(<= 259 IofCallDriver_~returnVal2~0)} assume !(~s~0 == ~NP~0); {11651#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2020-07-10 15:02:03,866 INFO L280 TraceCheckUtils]: 21: Hoare triple {11651#(<= 259 IofCallDriver_~returnVal2~0)} assume ~s~0 == ~MPR1~0; {11651#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2020-07-10 15:02:03,867 INFO L280 TraceCheckUtils]: 22: Hoare triple {11651#(<= 259 IofCallDriver_~returnVal2~0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {11651#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2020-07-10 15:02:03,867 INFO L280 TraceCheckUtils]: 23: Hoare triple {11651#(<= 259 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {11652#(<= 259 |IofCallDriver_#res|)} is VALID [2020-07-10 15:02:03,868 INFO L280 TraceCheckUtils]: 24: Hoare triple {11652#(<= 259 |IofCallDriver_#res|)} assume true; {11652#(<= 259 |IofCallDriver_#res|)} is VALID [2020-07-10 15:02:03,869 INFO L275 TraceCheckUtils]: 25: Hoare quadruple {11652#(<= 259 |IofCallDriver_#res|)} {11597#true} #468#return; {11634#(<= 259 |KbFilter_PnP_#t~ret8|)} is VALID [2020-07-10 15:02:03,871 INFO L263 TraceCheckUtils]: 0: Hoare triple {11597#true} call ULTIMATE.init(); {11636#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:02:03,871 INFO L280 TraceCheckUtils]: 1: Hoare triple {11636#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {11597#true} is VALID [2020-07-10 15:02:03,872 INFO L280 TraceCheckUtils]: 2: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,872 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {11597#true} {11597#true} #460#return; {11597#true} is VALID [2020-07-10 15:02:03,872 INFO L263 TraceCheckUtils]: 4: Hoare triple {11597#true} call #t~ret31 := main(); {11597#true} is VALID [2020-07-10 15:02:03,872 INFO L280 TraceCheckUtils]: 5: Hoare triple {11597#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {11597#true} is VALID [2020-07-10 15:02:03,874 INFO L263 TraceCheckUtils]: 6: Hoare triple {11597#true} call _BLAST_init(); {11637#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:02:03,874 INFO L280 TraceCheckUtils]: 7: Hoare triple {11637#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11597#true} is VALID [2020-07-10 15:02:03,874 INFO L280 TraceCheckUtils]: 8: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,875 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {11597#true} {11597#true} #440#return; {11597#true} is VALID [2020-07-10 15:02:03,875 INFO L280 TraceCheckUtils]: 10: Hoare triple {11597#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {11597#true} is VALID [2020-07-10 15:02:03,875 INFO L280 TraceCheckUtils]: 11: Hoare triple {11597#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {11597#true} is VALID [2020-07-10 15:02:03,876 INFO L263 TraceCheckUtils]: 12: Hoare triple {11597#true} call stub_driver_init(); {11638#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:02:03,876 INFO L280 TraceCheckUtils]: 13: Hoare triple {11638#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11597#true} is VALID [2020-07-10 15:02:03,877 INFO L280 TraceCheckUtils]: 14: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,877 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {11597#true} {11597#true} #442#return; {11597#true} is VALID [2020-07-10 15:02:03,877 INFO L280 TraceCheckUtils]: 16: Hoare triple {11597#true} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {11597#true} is VALID [2020-07-10 15:02:03,877 INFO L280 TraceCheckUtils]: 17: Hoare triple {11597#true} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {11597#true} is VALID [2020-07-10 15:02:03,877 INFO L280 TraceCheckUtils]: 18: Hoare triple {11597#true} assume 3 == ~tmp_ndt_1~0; {11597#true} is VALID [2020-07-10 15:02:03,878 INFO L263 TraceCheckUtils]: 19: Hoare triple {11597#true} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {11597#true} is VALID [2020-07-10 15:02:03,878 INFO L280 TraceCheckUtils]: 20: Hoare triple {11597#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {11597#true} is VALID [2020-07-10 15:02:03,878 INFO L280 TraceCheckUtils]: 21: Hoare triple {11597#true} assume 0 == ~irpStack__MinorFunction~0; {11597#true} is VALID [2020-07-10 15:02:03,878 INFO L280 TraceCheckUtils]: 22: Hoare triple {11597#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {11597#true} is VALID [2020-07-10 15:02:03,879 INFO L280 TraceCheckUtils]: 23: Hoare triple {11597#true} assume !(~s~0 != ~NP~0); {11597#true} is VALID [2020-07-10 15:02:03,879 INFO L280 TraceCheckUtils]: 24: Hoare triple {11597#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {11597#true} is VALID [2020-07-10 15:02:03,879 INFO L280 TraceCheckUtils]: 25: Hoare triple {11597#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Control~0 := 224; {11597#true} is VALID [2020-07-10 15:02:03,880 INFO L263 TraceCheckUtils]: 26: Hoare triple {11597#true} call #t~ret8 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {11639#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:02:03,880 INFO L280 TraceCheckUtils]: 27: Hoare triple {11639#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {11597#true} is VALID [2020-07-10 15:02:03,881 INFO L280 TraceCheckUtils]: 28: Hoare triple {11597#true} assume 0 != ~compRegistered~0; {11597#true} is VALID [2020-07-10 15:02:03,882 INFO L263 TraceCheckUtils]: 29: Hoare triple {11597#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {11653#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:03,882 INFO L280 TraceCheckUtils]: 30: Hoare triple {11653#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {11597#true} is VALID [2020-07-10 15:02:03,883 INFO L263 TraceCheckUtils]: 31: Hoare triple {11597#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {11653#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:03,883 INFO L280 TraceCheckUtils]: 32: Hoare triple {11653#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {11597#true} is VALID [2020-07-10 15:02:03,884 INFO L280 TraceCheckUtils]: 33: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,884 INFO L275 TraceCheckUtils]: 34: Hoare quadruple {11597#true} {11597#true} #438#return; {11597#true} is VALID [2020-07-10 15:02:03,884 INFO L280 TraceCheckUtils]: 35: Hoare triple {11597#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {11597#true} is VALID [2020-07-10 15:02:03,884 INFO L280 TraceCheckUtils]: 36: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,884 INFO L275 TraceCheckUtils]: 37: Hoare quadruple {11597#true} {11597#true} #448#return; {11597#true} is VALID [2020-07-10 15:02:03,885 INFO L280 TraceCheckUtils]: 38: Hoare triple {11597#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {11597#true} is VALID [2020-07-10 15:02:03,885 INFO L263 TraceCheckUtils]: 39: Hoare triple {11597#true} call stubMoreProcessingRequired(); {11657#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:02:03,886 INFO L280 TraceCheckUtils]: 40: Hoare triple {11657#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {11597#true} is VALID [2020-07-10 15:02:03,886 INFO L280 TraceCheckUtils]: 41: Hoare triple {11597#true} assume true; {11597#true} is VALID [2020-07-10 15:02:03,886 INFO L275 TraceCheckUtils]: 42: Hoare quadruple {11597#true} {11597#true} #450#return; {11597#true} is VALID [2020-07-10 15:02:03,886 INFO L280 TraceCheckUtils]: 43: Hoare triple {11597#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {11597#true} is VALID [2020-07-10 15:02:03,886 INFO L280 TraceCheckUtils]: 44: Hoare triple {11597#true} assume !(0 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_3~0 := #t~nondet27;havoc #t~nondet27; {11597#true} is VALID [2020-07-10 15:02:03,887 INFO L280 TraceCheckUtils]: 45: Hoare triple {11597#true} assume !(1 == ~tmp_ndt_3~0); {11597#true} is VALID [2020-07-10 15:02:03,887 INFO L280 TraceCheckUtils]: 46: Hoare triple {11597#true} ~returnVal2~0 := 259; {11651#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2020-07-10 15:02:03,888 INFO L280 TraceCheckUtils]: 47: Hoare triple {11651#(<= 259 IofCallDriver_~returnVal2~0)} assume !(~s~0 == ~NP~0); {11651#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2020-07-10 15:02:03,889 INFO L280 TraceCheckUtils]: 48: Hoare triple {11651#(<= 259 IofCallDriver_~returnVal2~0)} assume ~s~0 == ~MPR1~0; {11651#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2020-07-10 15:02:03,890 INFO L280 TraceCheckUtils]: 49: Hoare triple {11651#(<= 259 IofCallDriver_~returnVal2~0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {11651#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2020-07-10 15:02:03,891 INFO L280 TraceCheckUtils]: 50: Hoare triple {11651#(<= 259 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {11652#(<= 259 |IofCallDriver_#res|)} is VALID [2020-07-10 15:02:03,891 INFO L280 TraceCheckUtils]: 51: Hoare triple {11652#(<= 259 |IofCallDriver_#res|)} assume true; {11652#(<= 259 |IofCallDriver_#res|)} is VALID [2020-07-10 15:02:03,892 INFO L275 TraceCheckUtils]: 52: Hoare quadruple {11652#(<= 259 |IofCallDriver_#res|)} {11597#true} #468#return; {11634#(<= 259 |KbFilter_PnP_#t~ret8|)} is VALID [2020-07-10 15:02:03,893 INFO L280 TraceCheckUtils]: 53: Hoare triple {11634#(<= 259 |KbFilter_PnP_#t~ret8|)} assume -2147483648 <= #t~ret8 && #t~ret8 <= 2147483647;~status~0 := #t~ret8;havoc #t~ret8;~__cil_tmp23~0 := ~status~0; {11635#(<= 259 KbFilter_PnP_~status~0)} is VALID [2020-07-10 15:02:03,893 INFO L280 TraceCheckUtils]: 54: Hoare triple {11635#(<= 259 KbFilter_PnP_~status~0)} assume !(259 == ~__cil_tmp23~0); {11635#(<= 259 KbFilter_PnP_~status~0)} is VALID [2020-07-10 15:02:03,894 INFO L280 TraceCheckUtils]: 55: Hoare triple {11635#(<= 259 KbFilter_PnP_~status~0)} assume !(~status~0 >= 0); {11598#false} is VALID [2020-07-10 15:02:03,894 INFO L280 TraceCheckUtils]: 56: Hoare triple {11598#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {11598#false} is VALID [2020-07-10 15:02:03,894 INFO L263 TraceCheckUtils]: 57: Hoare triple {11598#false} call IofCompleteRequest(~Irp, 0); {11598#false} is VALID [2020-07-10 15:02:03,895 INFO L280 TraceCheckUtils]: 58: Hoare triple {11598#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {11598#false} is VALID [2020-07-10 15:02:03,895 INFO L280 TraceCheckUtils]: 59: Hoare triple {11598#false} assume !(~s~0 == ~NP~0); {11598#false} is VALID [2020-07-10 15:02:03,895 INFO L263 TraceCheckUtils]: 60: Hoare triple {11598#false} call errorFn(); {11598#false} is VALID [2020-07-10 15:02:03,895 INFO L280 TraceCheckUtils]: 61: Hoare triple {11598#false} assume !false; {11598#false} is VALID [2020-07-10 15:02:03,901 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:02:03,902 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [585845603] [2020-07-10 15:02:03,902 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:02:03,902 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2020-07-10 15:02:03,902 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [248175595] [2020-07-10 15:02:03,903 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 62 [2020-07-10 15:02:03,903 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:02:03,903 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states. [2020-07-10 15:02:03,991 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 62 edges. 62 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:02:03,992 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2020-07-10 15:02:03,992 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:02:03,992 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2020-07-10 15:02:03,992 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2020-07-10 15:02:03,992 INFO L87 Difference]: Start difference. First operand 91 states and 98 transitions. Second operand 12 states. [2020-07-10 15:02:05,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:05,484 INFO L93 Difference]: Finished difference Result 98 states and 104 transitions. [2020-07-10 15:02:05,484 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2020-07-10 15:02:05,484 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 62 [2020-07-10 15:02:05,485 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:02:05,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12 states. [2020-07-10 15:02:05,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 91 transitions. [2020-07-10 15:02:05,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12 states. [2020-07-10 15:02:05,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 91 transitions. [2020-07-10 15:02:05,487 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 91 transitions. [2020-07-10 15:02:05,623 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 91 edges. 91 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:02:05,625 INFO L225 Difference]: With dead ends: 98 [2020-07-10 15:02:05,625 INFO L226 Difference]: Without dead ends: 91 [2020-07-10 15:02:05,626 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=39, Invalid=117, Unknown=0, NotChecked=0, Total=156 [2020-07-10 15:02:05,626 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2020-07-10 15:02:05,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2020-07-10 15:02:05,952 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:02:05,952 INFO L82 GeneralOperation]: Start isEquivalent. First operand 91 states. Second operand 91 states. [2020-07-10 15:02:05,952 INFO L74 IsIncluded]: Start isIncluded. First operand 91 states. Second operand 91 states. [2020-07-10 15:02:05,952 INFO L87 Difference]: Start difference. First operand 91 states. Second operand 91 states. [2020-07-10 15:02:05,954 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:05,955 INFO L93 Difference]: Finished difference Result 91 states and 97 transitions. [2020-07-10 15:02:05,955 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 97 transitions. [2020-07-10 15:02:05,956 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:05,956 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:02:05,956 INFO L74 IsIncluded]: Start isIncluded. First operand 91 states. Second operand 91 states. [2020-07-10 15:02:05,956 INFO L87 Difference]: Start difference. First operand 91 states. Second operand 91 states. [2020-07-10 15:02:05,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:05,957 INFO L93 Difference]: Finished difference Result 91 states and 97 transitions. [2020-07-10 15:02:05,957 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 97 transitions. [2020-07-10 15:02:05,958 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:05,958 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:02:05,958 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:02:05,958 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:02:05,958 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 91 states. [2020-07-10 15:02:05,960 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 97 transitions. [2020-07-10 15:02:05,960 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 97 transitions. Word has length 62 [2020-07-10 15:02:05,963 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:02:05,963 INFO L479 AbstractCegarLoop]: Abstraction has 91 states and 97 transitions. [2020-07-10 15:02:05,963 INFO L480 AbstractCegarLoop]: Interpolant automaton has 12 states. [2020-07-10 15:02:05,963 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 97 transitions. [2020-07-10 15:02:05,966 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2020-07-10 15:02:05,966 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:02:05,966 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:02:05,966 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2020-07-10 15:02:05,966 INFO L427 AbstractCegarLoop]: === Iteration 15 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:02:05,966 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:02:05,967 INFO L82 PathProgramCache]: Analyzing trace with hash 359859562, now seen corresponding path program 1 times [2020-07-10 15:02:05,967 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:02:05,967 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1524805008] [2020-07-10 15:02:05,967 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:02:06,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:06,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:06,155 INFO L280 TraceCheckUtils]: 0: Hoare triple {12146#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12107#true} is VALID [2020-07-10 15:02:06,156 INFO L280 TraceCheckUtils]: 1: Hoare triple {12107#true} assume true; {12107#true} is VALID [2020-07-10 15:02:06,156 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {12107#true} {12107#true} #460#return; {12107#true} is VALID [2020-07-10 15:02:06,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:06,215 INFO L280 TraceCheckUtils]: 0: Hoare triple {12147#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12115#(and (<= 1 ~NP~0) (<= ~NP~0 1))} is VALID [2020-07-10 15:02:06,216 INFO L280 TraceCheckUtils]: 1: Hoare triple {12115#(and (<= 1 ~NP~0) (<= ~NP~0 1))} assume true; {12115#(and (<= 1 ~NP~0) (<= ~NP~0 1))} is VALID [2020-07-10 15:02:06,217 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {12115#(and (<= 1 ~NP~0) (<= ~NP~0 1))} {12107#true} #440#return; {12115#(and (<= 1 ~NP~0) (<= ~NP~0 1))} is VALID [2020-07-10 15:02:06,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:06,246 INFO L280 TraceCheckUtils]: 0: Hoare triple {12148#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12107#true} is VALID [2020-07-10 15:02:06,247 INFO L280 TraceCheckUtils]: 1: Hoare triple {12107#true} assume true; {12107#true} is VALID [2020-07-10 15:02:06,247 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {12107#true} {12107#true} #442#return; {12107#true} is VALID [2020-07-10 15:02:06,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:06,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:06,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:06,307 INFO L280 TraceCheckUtils]: 0: Hoare triple {12161#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,308 INFO L280 TraceCheckUtils]: 1: Hoare triple {12145#(= ~setEventCalled~0 1)} assume true; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,309 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {12145#(= ~setEventCalled~0 1)} {12107#true} #438#return; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,309 INFO L280 TraceCheckUtils]: 0: Hoare triple {12161#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {12107#true} is VALID [2020-07-10 15:02:06,310 INFO L263 TraceCheckUtils]: 1: Hoare triple {12107#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {12161#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:06,311 INFO L280 TraceCheckUtils]: 2: Hoare triple {12161#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,312 INFO L280 TraceCheckUtils]: 3: Hoare triple {12145#(= ~setEventCalled~0 1)} assume true; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,313 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {12145#(= ~setEventCalled~0 1)} {12107#true} #438#return; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,313 INFO L280 TraceCheckUtils]: 5: Hoare triple {12145#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,314 INFO L280 TraceCheckUtils]: 6: Hoare triple {12145#(= ~setEventCalled~0 1)} assume true; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,315 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {12145#(= ~setEventCalled~0 1)} {12107#true} #448#return; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:06,331 INFO L280 TraceCheckUtils]: 0: Hoare triple {12165#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {12107#true} is VALID [2020-07-10 15:02:06,331 INFO L280 TraceCheckUtils]: 1: Hoare triple {12107#true} assume true; {12107#true} is VALID [2020-07-10 15:02:06,332 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {12107#true} {12145#(= ~setEventCalled~0 1)} #450#return; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,332 INFO L280 TraceCheckUtils]: 0: Hoare triple {12149#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {12107#true} is VALID [2020-07-10 15:02:06,332 INFO L280 TraceCheckUtils]: 1: Hoare triple {12107#true} assume 0 != ~compRegistered~0; {12107#true} is VALID [2020-07-10 15:02:06,333 INFO L263 TraceCheckUtils]: 2: Hoare triple {12107#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {12161#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:06,333 INFO L280 TraceCheckUtils]: 3: Hoare triple {12161#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {12107#true} is VALID [2020-07-10 15:02:06,334 INFO L263 TraceCheckUtils]: 4: Hoare triple {12107#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {12161#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:06,335 INFO L280 TraceCheckUtils]: 5: Hoare triple {12161#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,336 INFO L280 TraceCheckUtils]: 6: Hoare triple {12145#(= ~setEventCalled~0 1)} assume true; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,336 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {12145#(= ~setEventCalled~0 1)} {12107#true} #438#return; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,337 INFO L280 TraceCheckUtils]: 8: Hoare triple {12145#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,338 INFO L280 TraceCheckUtils]: 9: Hoare triple {12145#(= ~setEventCalled~0 1)} assume true; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,339 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {12145#(= ~setEventCalled~0 1)} {12107#true} #448#return; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,339 INFO L280 TraceCheckUtils]: 11: Hoare triple {12145#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,340 INFO L263 TraceCheckUtils]: 12: Hoare triple {12145#(= ~setEventCalled~0 1)} call stubMoreProcessingRequired(); {12165#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:02:06,340 INFO L280 TraceCheckUtils]: 13: Hoare triple {12165#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {12107#true} is VALID [2020-07-10 15:02:06,340 INFO L280 TraceCheckUtils]: 14: Hoare triple {12107#true} assume true; {12107#true} is VALID [2020-07-10 15:02:06,341 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {12107#true} {12145#(= ~setEventCalled~0 1)} #450#return; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,341 INFO L280 TraceCheckUtils]: 16: Hoare triple {12145#(= ~setEventCalled~0 1)} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,342 INFO L280 TraceCheckUtils]: 17: Hoare triple {12145#(= ~setEventCalled~0 1)} assume !(0 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_3~0 := #t~nondet27;havoc #t~nondet27; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,343 INFO L280 TraceCheckUtils]: 18: Hoare triple {12145#(= ~setEventCalled~0 1)} assume !(1 == ~tmp_ndt_3~0); {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,343 INFO L280 TraceCheckUtils]: 19: Hoare triple {12145#(= ~setEventCalled~0 1)} ~returnVal2~0 := 259; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,344 INFO L280 TraceCheckUtils]: 20: Hoare triple {12145#(= ~setEventCalled~0 1)} assume !(~s~0 == ~NP~0); {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,344 INFO L280 TraceCheckUtils]: 21: Hoare triple {12145#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR1~0; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,345 INFO L280 TraceCheckUtils]: 22: Hoare triple {12145#(= ~setEventCalled~0 1)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,345 INFO L280 TraceCheckUtils]: 23: Hoare triple {12145#(= ~setEventCalled~0 1)} #res := ~returnVal2~0; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,346 INFO L280 TraceCheckUtils]: 24: Hoare triple {12145#(= ~setEventCalled~0 1)} assume true; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,347 INFO L275 TraceCheckUtils]: 25: Hoare quadruple {12145#(= ~setEventCalled~0 1)} {12107#true} #468#return; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,349 INFO L263 TraceCheckUtils]: 0: Hoare triple {12107#true} call ULTIMATE.init(); {12146#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:02:06,350 INFO L280 TraceCheckUtils]: 1: Hoare triple {12146#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12107#true} is VALID [2020-07-10 15:02:06,350 INFO L280 TraceCheckUtils]: 2: Hoare triple {12107#true} assume true; {12107#true} is VALID [2020-07-10 15:02:06,350 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {12107#true} {12107#true} #460#return; {12107#true} is VALID [2020-07-10 15:02:06,350 INFO L263 TraceCheckUtils]: 4: Hoare triple {12107#true} call #t~ret31 := main(); {12107#true} is VALID [2020-07-10 15:02:06,350 INFO L280 TraceCheckUtils]: 5: Hoare triple {12107#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {12107#true} is VALID [2020-07-10 15:02:06,352 INFO L263 TraceCheckUtils]: 6: Hoare triple {12107#true} call _BLAST_init(); {12147#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:02:06,353 INFO L280 TraceCheckUtils]: 7: Hoare triple {12147#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12115#(and (<= 1 ~NP~0) (<= ~NP~0 1))} is VALID [2020-07-10 15:02:06,354 INFO L280 TraceCheckUtils]: 8: Hoare triple {12115#(and (<= 1 ~NP~0) (<= ~NP~0 1))} assume true; {12115#(and (<= 1 ~NP~0) (<= ~NP~0 1))} is VALID [2020-07-10 15:02:06,354 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {12115#(and (<= 1 ~NP~0) (<= ~NP~0 1))} {12107#true} #440#return; {12115#(and (<= 1 ~NP~0) (<= ~NP~0 1))} is VALID [2020-07-10 15:02:06,354 INFO L280 TraceCheckUtils]: 10: Hoare triple {12115#(and (<= 1 ~NP~0) (<= ~NP~0 1))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {12107#true} is VALID [2020-07-10 15:02:06,355 INFO L280 TraceCheckUtils]: 11: Hoare triple {12107#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {12107#true} is VALID [2020-07-10 15:02:06,356 INFO L263 TraceCheckUtils]: 12: Hoare triple {12107#true} call stub_driver_init(); {12148#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:02:06,356 INFO L280 TraceCheckUtils]: 13: Hoare triple {12148#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12107#true} is VALID [2020-07-10 15:02:06,356 INFO L280 TraceCheckUtils]: 14: Hoare triple {12107#true} assume true; {12107#true} is VALID [2020-07-10 15:02:06,356 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {12107#true} {12107#true} #442#return; {12107#true} is VALID [2020-07-10 15:02:06,357 INFO L280 TraceCheckUtils]: 16: Hoare triple {12107#true} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {12107#true} is VALID [2020-07-10 15:02:06,357 INFO L280 TraceCheckUtils]: 17: Hoare triple {12107#true} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {12107#true} is VALID [2020-07-10 15:02:06,357 INFO L280 TraceCheckUtils]: 18: Hoare triple {12107#true} assume 3 == ~tmp_ndt_1~0; {12107#true} is VALID [2020-07-10 15:02:06,357 INFO L263 TraceCheckUtils]: 19: Hoare triple {12107#true} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {12107#true} is VALID [2020-07-10 15:02:06,357 INFO L280 TraceCheckUtils]: 20: Hoare triple {12107#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {12107#true} is VALID [2020-07-10 15:02:06,358 INFO L280 TraceCheckUtils]: 21: Hoare triple {12107#true} assume 0 == ~irpStack__MinorFunction~0; {12107#true} is VALID [2020-07-10 15:02:06,358 INFO L280 TraceCheckUtils]: 22: Hoare triple {12107#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {12107#true} is VALID [2020-07-10 15:02:06,358 INFO L280 TraceCheckUtils]: 23: Hoare triple {12107#true} assume !(~s~0 != ~NP~0); {12107#true} is VALID [2020-07-10 15:02:06,358 INFO L280 TraceCheckUtils]: 24: Hoare triple {12107#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {12107#true} is VALID [2020-07-10 15:02:06,358 INFO L280 TraceCheckUtils]: 25: Hoare triple {12107#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Control~0 := 224; {12107#true} is VALID [2020-07-10 15:02:06,359 INFO L263 TraceCheckUtils]: 26: Hoare triple {12107#true} call #t~ret8 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {12149#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:02:06,360 INFO L280 TraceCheckUtils]: 27: Hoare triple {12149#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {12107#true} is VALID [2020-07-10 15:02:06,360 INFO L280 TraceCheckUtils]: 28: Hoare triple {12107#true} assume 0 != ~compRegistered~0; {12107#true} is VALID [2020-07-10 15:02:06,361 INFO L263 TraceCheckUtils]: 29: Hoare triple {12107#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {12161#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:06,361 INFO L280 TraceCheckUtils]: 30: Hoare triple {12161#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {12107#true} is VALID [2020-07-10 15:02:06,362 INFO L263 TraceCheckUtils]: 31: Hoare triple {12107#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {12161#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:06,362 INFO L280 TraceCheckUtils]: 32: Hoare triple {12161#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,363 INFO L280 TraceCheckUtils]: 33: Hoare triple {12145#(= ~setEventCalled~0 1)} assume true; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,364 INFO L275 TraceCheckUtils]: 34: Hoare quadruple {12145#(= ~setEventCalled~0 1)} {12107#true} #438#return; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,364 INFO L280 TraceCheckUtils]: 35: Hoare triple {12145#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,365 INFO L280 TraceCheckUtils]: 36: Hoare triple {12145#(= ~setEventCalled~0 1)} assume true; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,366 INFO L275 TraceCheckUtils]: 37: Hoare quadruple {12145#(= ~setEventCalled~0 1)} {12107#true} #448#return; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,366 INFO L280 TraceCheckUtils]: 38: Hoare triple {12145#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,367 INFO L263 TraceCheckUtils]: 39: Hoare triple {12145#(= ~setEventCalled~0 1)} call stubMoreProcessingRequired(); {12165#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:02:06,367 INFO L280 TraceCheckUtils]: 40: Hoare triple {12165#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {12107#true} is VALID [2020-07-10 15:02:06,367 INFO L280 TraceCheckUtils]: 41: Hoare triple {12107#true} assume true; {12107#true} is VALID [2020-07-10 15:02:06,368 INFO L275 TraceCheckUtils]: 42: Hoare quadruple {12107#true} {12145#(= ~setEventCalled~0 1)} #450#return; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,368 INFO L280 TraceCheckUtils]: 43: Hoare triple {12145#(= ~setEventCalled~0 1)} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,369 INFO L280 TraceCheckUtils]: 44: Hoare triple {12145#(= ~setEventCalled~0 1)} assume !(0 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_3~0 := #t~nondet27;havoc #t~nondet27; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,369 INFO L280 TraceCheckUtils]: 45: Hoare triple {12145#(= ~setEventCalled~0 1)} assume !(1 == ~tmp_ndt_3~0); {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,370 INFO L280 TraceCheckUtils]: 46: Hoare triple {12145#(= ~setEventCalled~0 1)} ~returnVal2~0 := 259; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,370 INFO L280 TraceCheckUtils]: 47: Hoare triple {12145#(= ~setEventCalled~0 1)} assume !(~s~0 == ~NP~0); {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,371 INFO L280 TraceCheckUtils]: 48: Hoare triple {12145#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR1~0; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,372 INFO L280 TraceCheckUtils]: 49: Hoare triple {12145#(= ~setEventCalled~0 1)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,372 INFO L280 TraceCheckUtils]: 50: Hoare triple {12145#(= ~setEventCalled~0 1)} #res := ~returnVal2~0; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,373 INFO L280 TraceCheckUtils]: 51: Hoare triple {12145#(= ~setEventCalled~0 1)} assume true; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,374 INFO L275 TraceCheckUtils]: 52: Hoare quadruple {12145#(= ~setEventCalled~0 1)} {12107#true} #468#return; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,374 INFO L280 TraceCheckUtils]: 53: Hoare triple {12145#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret8 && #t~ret8 <= 2147483647;~status~0 := #t~ret8;havoc #t~ret8;~__cil_tmp23~0 := ~status~0; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,375 INFO L280 TraceCheckUtils]: 54: Hoare triple {12145#(= ~setEventCalled~0 1)} assume 259 == ~__cil_tmp23~0; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,376 INFO L263 TraceCheckUtils]: 55: Hoare triple {12145#(= ~setEventCalled~0 1)} call #t~ret9 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,376 INFO L280 TraceCheckUtils]: 56: Hoare triple {12145#(= ~setEventCalled~0 1)} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,377 INFO L280 TraceCheckUtils]: 57: Hoare triple {12145#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR3~0; {12145#(= ~setEventCalled~0 1)} is VALID [2020-07-10 15:02:06,378 INFO L280 TraceCheckUtils]: 58: Hoare triple {12145#(= ~setEventCalled~0 1)} assume !(1 == ~setEventCalled~0); {12108#false} is VALID [2020-07-10 15:02:06,378 INFO L280 TraceCheckUtils]: 59: Hoare triple {12108#false} assume !(1 == ~customIrp~0); {12108#false} is VALID [2020-07-10 15:02:06,378 INFO L280 TraceCheckUtils]: 60: Hoare triple {12108#false} assume ~s~0 == ~MPR3~0; {12108#false} is VALID [2020-07-10 15:02:06,378 INFO L263 TraceCheckUtils]: 61: Hoare triple {12108#false} call errorFn(); {12108#false} is VALID [2020-07-10 15:02:06,378 INFO L280 TraceCheckUtils]: 62: Hoare triple {12108#false} assume !false; {12108#false} is VALID [2020-07-10 15:02:06,385 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:02:06,385 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1524805008] [2020-07-10 15:02:06,385 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:02:06,385 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2020-07-10 15:02:06,386 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [455860346] [2020-07-10 15:02:06,386 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 63 [2020-07-10 15:02:06,386 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:02:06,387 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states. [2020-07-10 15:02:06,467 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 63 edges. 63 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:02:06,467 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2020-07-10 15:02:06,468 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:02:06,468 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2020-07-10 15:02:06,468 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=59, Unknown=0, NotChecked=0, Total=90 [2020-07-10 15:02:06,468 INFO L87 Difference]: Start difference. First operand 91 states and 97 transitions. Second operand 10 states. [2020-07-10 15:02:07,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:07,793 INFO L93 Difference]: Finished difference Result 107 states and 114 transitions. [2020-07-10 15:02:07,793 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2020-07-10 15:02:07,793 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 63 [2020-07-10 15:02:07,794 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:02:07,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2020-07-10 15:02:07,800 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 103 transitions. [2020-07-10 15:02:07,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2020-07-10 15:02:07,803 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 103 transitions. [2020-07-10 15:02:07,803 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 103 transitions. [2020-07-10 15:02:08,046 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 103 edges. 103 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:02:08,054 INFO L225 Difference]: With dead ends: 107 [2020-07-10 15:02:08,054 INFO L226 Difference]: Without dead ends: 76 [2020-07-10 15:02:08,055 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 12 SyntacticMatches, 3 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=78, Invalid=162, Unknown=0, NotChecked=0, Total=240 [2020-07-10 15:02:08,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2020-07-10 15:02:08,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2020-07-10 15:02:08,458 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:02:08,458 INFO L82 GeneralOperation]: Start isEquivalent. First operand 76 states. Second operand 76 states. [2020-07-10 15:02:08,458 INFO L74 IsIncluded]: Start isIncluded. First operand 76 states. Second operand 76 states. [2020-07-10 15:02:08,459 INFO L87 Difference]: Start difference. First operand 76 states. Second operand 76 states. [2020-07-10 15:02:08,473 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:08,474 INFO L93 Difference]: Finished difference Result 76 states and 79 transitions. [2020-07-10 15:02:08,474 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 79 transitions. [2020-07-10 15:02:08,475 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:08,475 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:02:08,475 INFO L74 IsIncluded]: Start isIncluded. First operand 76 states. Second operand 76 states. [2020-07-10 15:02:08,475 INFO L87 Difference]: Start difference. First operand 76 states. Second operand 76 states. [2020-07-10 15:02:08,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:08,485 INFO L93 Difference]: Finished difference Result 76 states and 79 transitions. [2020-07-10 15:02:08,485 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 79 transitions. [2020-07-10 15:02:08,485 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:08,486 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:02:08,486 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:02:08,486 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:02:08,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 76 states. [2020-07-10 15:02:08,491 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 79 transitions. [2020-07-10 15:02:08,491 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 79 transitions. Word has length 63 [2020-07-10 15:02:08,492 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:02:08,492 INFO L479 AbstractCegarLoop]: Abstraction has 76 states and 79 transitions. [2020-07-10 15:02:08,492 INFO L480 AbstractCegarLoop]: Interpolant automaton has 10 states. [2020-07-10 15:02:08,493 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 79 transitions. [2020-07-10 15:02:08,494 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2020-07-10 15:02:08,494 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:02:08,495 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:02:08,495 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2020-07-10 15:02:08,495 INFO L427 AbstractCegarLoop]: === Iteration 16 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:02:08,495 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:02:08,496 INFO L82 PathProgramCache]: Analyzing trace with hash 1228040100, now seen corresponding path program 1 times [2020-07-10 15:02:08,496 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:02:08,496 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [978969929] [2020-07-10 15:02:08,497 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:02:08,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:08,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:08,634 INFO L280 TraceCheckUtils]: 0: Hoare triple {12625#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12587#true} is VALID [2020-07-10 15:02:08,635 INFO L280 TraceCheckUtils]: 1: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,635 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {12587#true} {12587#true} #460#return; {12587#true} is VALID [2020-07-10 15:02:08,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:08,681 INFO L280 TraceCheckUtils]: 0: Hoare triple {12626#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12587#true} is VALID [2020-07-10 15:02:08,682 INFO L280 TraceCheckUtils]: 1: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,682 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {12587#true} {12587#true} #440#return; {12587#true} is VALID [2020-07-10 15:02:08,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:08,709 INFO L280 TraceCheckUtils]: 0: Hoare triple {12627#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12587#true} is VALID [2020-07-10 15:02:08,710 INFO L280 TraceCheckUtils]: 1: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,710 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {12587#true} {12595#(<= (+ ~myStatus~0 1073741637) 0)} #442#return; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:08,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:08,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:08,750 INFO L280 TraceCheckUtils]: 0: Hoare triple {12640#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {12587#true} is VALID [2020-07-10 15:02:08,751 INFO L280 TraceCheckUtils]: 1: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,751 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {12587#true} {12587#true} #438#return; {12587#true} is VALID [2020-07-10 15:02:08,751 INFO L280 TraceCheckUtils]: 0: Hoare triple {12640#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {12587#true} is VALID [2020-07-10 15:02:08,752 INFO L263 TraceCheckUtils]: 1: Hoare triple {12587#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {12640#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:08,752 INFO L280 TraceCheckUtils]: 2: Hoare triple {12640#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {12587#true} is VALID [2020-07-10 15:02:08,752 INFO L280 TraceCheckUtils]: 3: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,753 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {12587#true} {12587#true} #438#return; {12587#true} is VALID [2020-07-10 15:02:08,753 INFO L280 TraceCheckUtils]: 5: Hoare triple {12587#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {12587#true} is VALID [2020-07-10 15:02:08,753 INFO L280 TraceCheckUtils]: 6: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,753 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {12587#true} {12587#true} #448#return; {12587#true} is VALID [2020-07-10 15:02:08,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:08,767 INFO L280 TraceCheckUtils]: 0: Hoare triple {12644#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {12587#true} is VALID [2020-07-10 15:02:08,767 INFO L280 TraceCheckUtils]: 1: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,768 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {12587#true} {12587#true} #450#return; {12587#true} is VALID [2020-07-10 15:02:08,768 INFO L280 TraceCheckUtils]: 0: Hoare triple {12628#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {12587#true} is VALID [2020-07-10 15:02:08,768 INFO L280 TraceCheckUtils]: 1: Hoare triple {12587#true} assume 0 != ~compRegistered~0; {12587#true} is VALID [2020-07-10 15:02:08,769 INFO L263 TraceCheckUtils]: 2: Hoare triple {12587#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {12640#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:08,769 INFO L280 TraceCheckUtils]: 3: Hoare triple {12640#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {12587#true} is VALID [2020-07-10 15:02:08,770 INFO L263 TraceCheckUtils]: 4: Hoare triple {12587#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {12640#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:08,770 INFO L280 TraceCheckUtils]: 5: Hoare triple {12640#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {12587#true} is VALID [2020-07-10 15:02:08,771 INFO L280 TraceCheckUtils]: 6: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,771 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {12587#true} {12587#true} #438#return; {12587#true} is VALID [2020-07-10 15:02:08,771 INFO L280 TraceCheckUtils]: 8: Hoare triple {12587#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {12587#true} is VALID [2020-07-10 15:02:08,771 INFO L280 TraceCheckUtils]: 9: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,772 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {12587#true} {12587#true} #448#return; {12587#true} is VALID [2020-07-10 15:02:08,772 INFO L280 TraceCheckUtils]: 11: Hoare triple {12587#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {12587#true} is VALID [2020-07-10 15:02:08,773 INFO L263 TraceCheckUtils]: 12: Hoare triple {12587#true} call stubMoreProcessingRequired(); {12644#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:02:08,773 INFO L280 TraceCheckUtils]: 13: Hoare triple {12644#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {12587#true} is VALID [2020-07-10 15:02:08,773 INFO L280 TraceCheckUtils]: 14: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,773 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {12587#true} {12587#true} #450#return; {12587#true} is VALID [2020-07-10 15:02:08,773 INFO L280 TraceCheckUtils]: 16: Hoare triple {12587#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {12587#true} is VALID [2020-07-10 15:02:08,774 INFO L280 TraceCheckUtils]: 17: Hoare triple {12587#true} assume !(0 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_3~0 := #t~nondet27;havoc #t~nondet27; {12587#true} is VALID [2020-07-10 15:02:08,774 INFO L280 TraceCheckUtils]: 18: Hoare triple {12587#true} assume !(1 == ~tmp_ndt_3~0); {12587#true} is VALID [2020-07-10 15:02:08,774 INFO L280 TraceCheckUtils]: 19: Hoare triple {12587#true} ~returnVal2~0 := 259; {12587#true} is VALID [2020-07-10 15:02:08,774 INFO L280 TraceCheckUtils]: 20: Hoare triple {12587#true} assume !(~s~0 == ~NP~0); {12587#true} is VALID [2020-07-10 15:02:08,774 INFO L280 TraceCheckUtils]: 21: Hoare triple {12587#true} assume ~s~0 == ~MPR1~0; {12587#true} is VALID [2020-07-10 15:02:08,775 INFO L280 TraceCheckUtils]: 22: Hoare triple {12587#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {12587#true} is VALID [2020-07-10 15:02:08,775 INFO L280 TraceCheckUtils]: 23: Hoare triple {12587#true} #res := ~returnVal2~0; {12587#true} is VALID [2020-07-10 15:02:08,775 INFO L280 TraceCheckUtils]: 24: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,776 INFO L275 TraceCheckUtils]: 25: Hoare quadruple {12587#true} {12595#(<= (+ ~myStatus~0 1073741637) 0)} #468#return; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,778 INFO L263 TraceCheckUtils]: 0: Hoare triple {12587#true} call ULTIMATE.init(); {12625#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:02:08,778 INFO L280 TraceCheckUtils]: 1: Hoare triple {12625#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12587#true} is VALID [2020-07-10 15:02:08,779 INFO L280 TraceCheckUtils]: 2: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,779 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {12587#true} {12587#true} #460#return; {12587#true} is VALID [2020-07-10 15:02:08,779 INFO L263 TraceCheckUtils]: 4: Hoare triple {12587#true} call #t~ret31 := main(); {12587#true} is VALID [2020-07-10 15:02:08,779 INFO L280 TraceCheckUtils]: 5: Hoare triple {12587#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {12587#true} is VALID [2020-07-10 15:02:08,781 INFO L263 TraceCheckUtils]: 6: Hoare triple {12587#true} call _BLAST_init(); {12626#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:02:08,781 INFO L280 TraceCheckUtils]: 7: Hoare triple {12626#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12587#true} is VALID [2020-07-10 15:02:08,782 INFO L280 TraceCheckUtils]: 8: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,782 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {12587#true} {12587#true} #440#return; {12587#true} is VALID [2020-07-10 15:02:08,782 INFO L280 TraceCheckUtils]: 10: Hoare triple {12587#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {12587#true} is VALID [2020-07-10 15:02:08,783 INFO L280 TraceCheckUtils]: 11: Hoare triple {12587#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,784 INFO L263 TraceCheckUtils]: 12: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} call stub_driver_init(); {12627#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:02:08,784 INFO L280 TraceCheckUtils]: 13: Hoare triple {12627#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12587#true} is VALID [2020-07-10 15:02:08,784 INFO L280 TraceCheckUtils]: 14: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,784 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {12587#true} {12595#(<= (+ ~myStatus~0 1073741637) 0)} #442#return; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,785 INFO L280 TraceCheckUtils]: 16: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,785 INFO L280 TraceCheckUtils]: 17: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,786 INFO L280 TraceCheckUtils]: 18: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} assume 3 == ~tmp_ndt_1~0; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,787 INFO L263 TraceCheckUtils]: 19: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,787 INFO L280 TraceCheckUtils]: 20: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,788 INFO L280 TraceCheckUtils]: 21: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} assume 0 == ~irpStack__MinorFunction~0; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,788 INFO L280 TraceCheckUtils]: 22: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,788 INFO L280 TraceCheckUtils]: 23: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} assume !(~s~0 != ~NP~0); {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,789 INFO L280 TraceCheckUtils]: 24: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,789 INFO L280 TraceCheckUtils]: 25: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Control~0 := 224; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,790 INFO L263 TraceCheckUtils]: 26: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} call #t~ret8 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {12628#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:02:08,791 INFO L280 TraceCheckUtils]: 27: Hoare triple {12628#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {12587#true} is VALID [2020-07-10 15:02:08,791 INFO L280 TraceCheckUtils]: 28: Hoare triple {12587#true} assume 0 != ~compRegistered~0; {12587#true} is VALID [2020-07-10 15:02:08,792 INFO L263 TraceCheckUtils]: 29: Hoare triple {12587#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {12640#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:08,792 INFO L280 TraceCheckUtils]: 30: Hoare triple {12640#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {12587#true} is VALID [2020-07-10 15:02:08,793 INFO L263 TraceCheckUtils]: 31: Hoare triple {12587#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {12640#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:08,793 INFO L280 TraceCheckUtils]: 32: Hoare triple {12640#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {12587#true} is VALID [2020-07-10 15:02:08,793 INFO L280 TraceCheckUtils]: 33: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,793 INFO L275 TraceCheckUtils]: 34: Hoare quadruple {12587#true} {12587#true} #438#return; {12587#true} is VALID [2020-07-10 15:02:08,793 INFO L280 TraceCheckUtils]: 35: Hoare triple {12587#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {12587#true} is VALID [2020-07-10 15:02:08,793 INFO L280 TraceCheckUtils]: 36: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,794 INFO L275 TraceCheckUtils]: 37: Hoare quadruple {12587#true} {12587#true} #448#return; {12587#true} is VALID [2020-07-10 15:02:08,794 INFO L280 TraceCheckUtils]: 38: Hoare triple {12587#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {12587#true} is VALID [2020-07-10 15:02:08,794 INFO L263 TraceCheckUtils]: 39: Hoare triple {12587#true} call stubMoreProcessingRequired(); {12644#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:02:08,795 INFO L280 TraceCheckUtils]: 40: Hoare triple {12644#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {12587#true} is VALID [2020-07-10 15:02:08,795 INFO L280 TraceCheckUtils]: 41: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,795 INFO L275 TraceCheckUtils]: 42: Hoare quadruple {12587#true} {12587#true} #450#return; {12587#true} is VALID [2020-07-10 15:02:08,795 INFO L280 TraceCheckUtils]: 43: Hoare triple {12587#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {12587#true} is VALID [2020-07-10 15:02:08,795 INFO L280 TraceCheckUtils]: 44: Hoare triple {12587#true} assume !(0 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_3~0 := #t~nondet27;havoc #t~nondet27; {12587#true} is VALID [2020-07-10 15:02:08,795 INFO L280 TraceCheckUtils]: 45: Hoare triple {12587#true} assume !(1 == ~tmp_ndt_3~0); {12587#true} is VALID [2020-07-10 15:02:08,796 INFO L280 TraceCheckUtils]: 46: Hoare triple {12587#true} ~returnVal2~0 := 259; {12587#true} is VALID [2020-07-10 15:02:08,796 INFO L280 TraceCheckUtils]: 47: Hoare triple {12587#true} assume !(~s~0 == ~NP~0); {12587#true} is VALID [2020-07-10 15:02:08,796 INFO L280 TraceCheckUtils]: 48: Hoare triple {12587#true} assume ~s~0 == ~MPR1~0; {12587#true} is VALID [2020-07-10 15:02:08,796 INFO L280 TraceCheckUtils]: 49: Hoare triple {12587#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {12587#true} is VALID [2020-07-10 15:02:08,796 INFO L280 TraceCheckUtils]: 50: Hoare triple {12587#true} #res := ~returnVal2~0; {12587#true} is VALID [2020-07-10 15:02:08,797 INFO L280 TraceCheckUtils]: 51: Hoare triple {12587#true} assume true; {12587#true} is VALID [2020-07-10 15:02:08,797 INFO L275 TraceCheckUtils]: 52: Hoare quadruple {12587#true} {12595#(<= (+ ~myStatus~0 1073741637) 0)} #468#return; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,798 INFO L280 TraceCheckUtils]: 53: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} assume -2147483648 <= #t~ret8 && #t~ret8 <= 2147483647;~status~0 := #t~ret8;havoc #t~ret8;~__cil_tmp23~0 := ~status~0; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,798 INFO L280 TraceCheckUtils]: 54: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} assume !(259 == ~__cil_tmp23~0); {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,799 INFO L280 TraceCheckUtils]: 55: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} assume ~status~0 >= 0; {12595#(<= (+ ~myStatus~0 1073741637) 0)} is VALID [2020-07-10 15:02:08,800 INFO L280 TraceCheckUtils]: 56: Hoare triple {12595#(<= (+ ~myStatus~0 1073741637) 0)} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {12588#false} is VALID [2020-07-10 15:02:08,800 INFO L280 TraceCheckUtils]: 57: Hoare triple {12588#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {12588#false} is VALID [2020-07-10 15:02:08,800 INFO L263 TraceCheckUtils]: 58: Hoare triple {12588#false} call IofCompleteRequest(~Irp, 0); {12588#false} is VALID [2020-07-10 15:02:08,800 INFO L280 TraceCheckUtils]: 59: Hoare triple {12588#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12588#false} is VALID [2020-07-10 15:02:08,800 INFO L280 TraceCheckUtils]: 60: Hoare triple {12588#false} assume !(~s~0 == ~NP~0); {12588#false} is VALID [2020-07-10 15:02:08,801 INFO L263 TraceCheckUtils]: 61: Hoare triple {12588#false} call errorFn(); {12588#false} is VALID [2020-07-10 15:02:08,801 INFO L280 TraceCheckUtils]: 62: Hoare triple {12588#false} assume !false; {12588#false} is VALID [2020-07-10 15:02:08,807 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:02:08,807 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [978969929] [2020-07-10 15:02:08,808 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:02:08,808 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2020-07-10 15:02:08,808 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1395223844] [2020-07-10 15:02:08,809 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 63 [2020-07-10 15:02:08,809 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:02:08,809 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states. [2020-07-10 15:02:08,875 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 63 edges. 63 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:02:08,875 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2020-07-10 15:02:08,876 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:02:08,876 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2020-07-10 15:02:08,876 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2020-07-10 15:02:08,876 INFO L87 Difference]: Start difference. First operand 76 states and 79 transitions. Second operand 9 states. [2020-07-10 15:02:10,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:10,122 INFO L93 Difference]: Finished difference Result 141 states and 146 transitions. [2020-07-10 15:02:10,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2020-07-10 15:02:10,122 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 63 [2020-07-10 15:02:10,123 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:02:10,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-10 15:02:10,125 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 146 transitions. [2020-07-10 15:02:10,125 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-10 15:02:10,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 146 transitions. [2020-07-10 15:02:10,127 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 146 transitions. [2020-07-10 15:02:10,365 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 146 edges. 146 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:02:10,368 INFO L225 Difference]: With dead ends: 141 [2020-07-10 15:02:10,369 INFO L226 Difference]: Without dead ends: 134 [2020-07-10 15:02:10,369 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=57, Invalid=99, Unknown=0, NotChecked=0, Total=156 [2020-07-10 15:02:10,370 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 134 states. [2020-07-10 15:02:10,847 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 134 to 133. [2020-07-10 15:02:10,848 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:02:10,848 INFO L82 GeneralOperation]: Start isEquivalent. First operand 134 states. Second operand 133 states. [2020-07-10 15:02:10,848 INFO L74 IsIncluded]: Start isIncluded. First operand 134 states. Second operand 133 states. [2020-07-10 15:02:10,848 INFO L87 Difference]: Start difference. First operand 134 states. Second operand 133 states. [2020-07-10 15:02:10,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:10,851 INFO L93 Difference]: Finished difference Result 134 states and 139 transitions. [2020-07-10 15:02:10,851 INFO L276 IsEmpty]: Start isEmpty. Operand 134 states and 139 transitions. [2020-07-10 15:02:10,852 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:10,852 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:02:10,852 INFO L74 IsIncluded]: Start isIncluded. First operand 133 states. Second operand 134 states. [2020-07-10 15:02:10,852 INFO L87 Difference]: Start difference. First operand 133 states. Second operand 134 states. [2020-07-10 15:02:10,855 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:10,855 INFO L93 Difference]: Finished difference Result 134 states and 139 transitions. [2020-07-10 15:02:10,855 INFO L276 IsEmpty]: Start isEmpty. Operand 134 states and 139 transitions. [2020-07-10 15:02:10,856 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:10,856 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:02:10,856 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:02:10,856 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:02:10,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 133 states. [2020-07-10 15:02:10,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 133 states to 133 states and 138 transitions. [2020-07-10 15:02:10,859 INFO L78 Accepts]: Start accepts. Automaton has 133 states and 138 transitions. Word has length 63 [2020-07-10 15:02:10,860 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:02:10,860 INFO L479 AbstractCegarLoop]: Abstraction has 133 states and 138 transitions. [2020-07-10 15:02:10,860 INFO L480 AbstractCegarLoop]: Interpolant automaton has 9 states. [2020-07-10 15:02:10,860 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 138 transitions. [2020-07-10 15:02:10,861 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2020-07-10 15:02:10,861 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:02:10,861 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:02:10,861 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2020-07-10 15:02:10,861 INFO L427 AbstractCegarLoop]: === Iteration 17 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:02:10,862 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:02:10,862 INFO L82 PathProgramCache]: Analyzing trace with hash -1291919834, now seen corresponding path program 1 times [2020-07-10 15:02:10,862 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:02:10,862 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [972182354] [2020-07-10 15:02:10,862 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:02:10,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:10,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:10,997 INFO L280 TraceCheckUtils]: 0: Hoare triple {13341#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {13302#true} is VALID [2020-07-10 15:02:10,997 INFO L280 TraceCheckUtils]: 1: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:10,998 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {13302#true} {13302#true} #460#return; {13302#true} is VALID [2020-07-10 15:02:11,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:11,071 INFO L280 TraceCheckUtils]: 0: Hoare triple {13342#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13302#true} is VALID [2020-07-10 15:02:11,071 INFO L280 TraceCheckUtils]: 1: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,073 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {13302#true} {13302#true} #440#return; {13302#true} is VALID [2020-07-10 15:02:11,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:11,114 INFO L280 TraceCheckUtils]: 0: Hoare triple {13343#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13302#true} is VALID [2020-07-10 15:02:11,114 INFO L280 TraceCheckUtils]: 1: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,115 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {13302#true} {13302#true} #442#return; {13302#true} is VALID [2020-07-10 15:02:11,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:11,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:11,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:11,231 INFO L280 TraceCheckUtils]: 0: Hoare triple {13358#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {13302#true} is VALID [2020-07-10 15:02:11,231 INFO L280 TraceCheckUtils]: 1: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,231 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {13302#true} {13302#true} #438#return; {13302#true} is VALID [2020-07-10 15:02:11,232 INFO L280 TraceCheckUtils]: 0: Hoare triple {13358#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {13302#true} is VALID [2020-07-10 15:02:11,233 INFO L263 TraceCheckUtils]: 1: Hoare triple {13302#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {13358#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:11,234 INFO L280 TraceCheckUtils]: 2: Hoare triple {13358#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {13302#true} is VALID [2020-07-10 15:02:11,234 INFO L280 TraceCheckUtils]: 3: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,234 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {13302#true} {13302#true} #438#return; {13302#true} is VALID [2020-07-10 15:02:11,235 INFO L280 TraceCheckUtils]: 5: Hoare triple {13302#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {13302#true} is VALID [2020-07-10 15:02:11,235 INFO L280 TraceCheckUtils]: 6: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,235 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {13302#true} {13302#true} #448#return; {13302#true} is VALID [2020-07-10 15:02:11,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:11,260 INFO L280 TraceCheckUtils]: 0: Hoare triple {13362#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {13302#true} is VALID [2020-07-10 15:02:11,260 INFO L280 TraceCheckUtils]: 1: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,260 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {13302#true} {13302#true} #450#return; {13302#true} is VALID [2020-07-10 15:02:11,260 INFO L280 TraceCheckUtils]: 0: Hoare triple {13344#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {13302#true} is VALID [2020-07-10 15:02:11,261 INFO L280 TraceCheckUtils]: 1: Hoare triple {13302#true} assume 0 != ~compRegistered~0; {13302#true} is VALID [2020-07-10 15:02:11,262 INFO L263 TraceCheckUtils]: 2: Hoare triple {13302#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {13358#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:11,262 INFO L280 TraceCheckUtils]: 3: Hoare triple {13358#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {13302#true} is VALID [2020-07-10 15:02:11,263 INFO L263 TraceCheckUtils]: 4: Hoare triple {13302#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {13358#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:11,263 INFO L280 TraceCheckUtils]: 5: Hoare triple {13358#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {13302#true} is VALID [2020-07-10 15:02:11,263 INFO L280 TraceCheckUtils]: 6: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,264 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {13302#true} {13302#true} #438#return; {13302#true} is VALID [2020-07-10 15:02:11,264 INFO L280 TraceCheckUtils]: 8: Hoare triple {13302#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {13302#true} is VALID [2020-07-10 15:02:11,264 INFO L280 TraceCheckUtils]: 9: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,265 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {13302#true} {13302#true} #448#return; {13302#true} is VALID [2020-07-10 15:02:11,265 INFO L280 TraceCheckUtils]: 11: Hoare triple {13302#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {13302#true} is VALID [2020-07-10 15:02:11,266 INFO L263 TraceCheckUtils]: 12: Hoare triple {13302#true} call stubMoreProcessingRequired(); {13362#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:02:11,266 INFO L280 TraceCheckUtils]: 13: Hoare triple {13362#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {13302#true} is VALID [2020-07-10 15:02:11,267 INFO L280 TraceCheckUtils]: 14: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,267 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {13302#true} {13302#true} #450#return; {13302#true} is VALID [2020-07-10 15:02:11,267 INFO L280 TraceCheckUtils]: 16: Hoare triple {13302#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {13302#true} is VALID [2020-07-10 15:02:11,268 INFO L280 TraceCheckUtils]: 17: Hoare triple {13302#true} assume !(0 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_3~0 := #t~nondet27;havoc #t~nondet27; {13302#true} is VALID [2020-07-10 15:02:11,268 INFO L280 TraceCheckUtils]: 18: Hoare triple {13302#true} assume !(1 == ~tmp_ndt_3~0); {13302#true} is VALID [2020-07-10 15:02:11,269 INFO L280 TraceCheckUtils]: 19: Hoare triple {13302#true} ~returnVal2~0 := 259; {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} is VALID [2020-07-10 15:02:11,270 INFO L280 TraceCheckUtils]: 20: Hoare triple {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} assume !(~s~0 == ~NP~0); {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} is VALID [2020-07-10 15:02:11,271 INFO L280 TraceCheckUtils]: 21: Hoare triple {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} assume ~s~0 == ~MPR1~0; {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} is VALID [2020-07-10 15:02:11,272 INFO L280 TraceCheckUtils]: 22: Hoare triple {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} is VALID [2020-07-10 15:02:11,273 INFO L280 TraceCheckUtils]: 23: Hoare triple {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} #res := ~returnVal2~0; {13357#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2020-07-10 15:02:11,274 INFO L280 TraceCheckUtils]: 24: Hoare triple {13357#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} assume true; {13357#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2020-07-10 15:02:11,276 INFO L275 TraceCheckUtils]: 25: Hoare quadruple {13357#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} {13302#true} #468#return; {13339#(and (<= |KbFilter_PnP_#t~ret8| 259) (<= 259 |KbFilter_PnP_#t~ret8|))} is VALID [2020-07-10 15:02:11,280 INFO L263 TraceCheckUtils]: 0: Hoare triple {13302#true} call ULTIMATE.init(); {13341#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:02:11,280 INFO L280 TraceCheckUtils]: 1: Hoare triple {13341#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {13302#true} is VALID [2020-07-10 15:02:11,280 INFO L280 TraceCheckUtils]: 2: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,281 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {13302#true} {13302#true} #460#return; {13302#true} is VALID [2020-07-10 15:02:11,281 INFO L263 TraceCheckUtils]: 4: Hoare triple {13302#true} call #t~ret31 := main(); {13302#true} is VALID [2020-07-10 15:02:11,281 INFO L280 TraceCheckUtils]: 5: Hoare triple {13302#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {13302#true} is VALID [2020-07-10 15:02:11,284 INFO L263 TraceCheckUtils]: 6: Hoare triple {13302#true} call _BLAST_init(); {13342#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:02:11,284 INFO L280 TraceCheckUtils]: 7: Hoare triple {13342#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13302#true} is VALID [2020-07-10 15:02:11,284 INFO L280 TraceCheckUtils]: 8: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,285 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {13302#true} {13302#true} #440#return; {13302#true} is VALID [2020-07-10 15:02:11,285 INFO L280 TraceCheckUtils]: 10: Hoare triple {13302#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {13302#true} is VALID [2020-07-10 15:02:11,285 INFO L280 TraceCheckUtils]: 11: Hoare triple {13302#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {13302#true} is VALID [2020-07-10 15:02:11,287 INFO L263 TraceCheckUtils]: 12: Hoare triple {13302#true} call stub_driver_init(); {13343#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:02:11,287 INFO L280 TraceCheckUtils]: 13: Hoare triple {13343#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13302#true} is VALID [2020-07-10 15:02:11,287 INFO L280 TraceCheckUtils]: 14: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,288 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {13302#true} {13302#true} #442#return; {13302#true} is VALID [2020-07-10 15:02:11,288 INFO L280 TraceCheckUtils]: 16: Hoare triple {13302#true} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {13302#true} is VALID [2020-07-10 15:02:11,288 INFO L280 TraceCheckUtils]: 17: Hoare triple {13302#true} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {13302#true} is VALID [2020-07-10 15:02:11,288 INFO L280 TraceCheckUtils]: 18: Hoare triple {13302#true} assume 3 == ~tmp_ndt_1~0; {13302#true} is VALID [2020-07-10 15:02:11,289 INFO L263 TraceCheckUtils]: 19: Hoare triple {13302#true} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {13302#true} is VALID [2020-07-10 15:02:11,289 INFO L280 TraceCheckUtils]: 20: Hoare triple {13302#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {13302#true} is VALID [2020-07-10 15:02:11,289 INFO L280 TraceCheckUtils]: 21: Hoare triple {13302#true} assume 0 == ~irpStack__MinorFunction~0; {13302#true} is VALID [2020-07-10 15:02:11,290 INFO L280 TraceCheckUtils]: 22: Hoare triple {13302#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {13302#true} is VALID [2020-07-10 15:02:11,290 INFO L280 TraceCheckUtils]: 23: Hoare triple {13302#true} assume !(~s~0 != ~NP~0); {13302#true} is VALID [2020-07-10 15:02:11,290 INFO L280 TraceCheckUtils]: 24: Hoare triple {13302#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {13302#true} is VALID [2020-07-10 15:02:11,291 INFO L280 TraceCheckUtils]: 25: Hoare triple {13302#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Control~0 := 224; {13302#true} is VALID [2020-07-10 15:02:11,292 INFO L263 TraceCheckUtils]: 26: Hoare triple {13302#true} call #t~ret8 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {13344#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:02:11,292 INFO L280 TraceCheckUtils]: 27: Hoare triple {13344#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {13302#true} is VALID [2020-07-10 15:02:11,293 INFO L280 TraceCheckUtils]: 28: Hoare triple {13302#true} assume 0 != ~compRegistered~0; {13302#true} is VALID [2020-07-10 15:02:11,294 INFO L263 TraceCheckUtils]: 29: Hoare triple {13302#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {13358#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:11,295 INFO L280 TraceCheckUtils]: 30: Hoare triple {13358#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {13302#true} is VALID [2020-07-10 15:02:11,296 INFO L263 TraceCheckUtils]: 31: Hoare triple {13302#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {13358#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:11,296 INFO L280 TraceCheckUtils]: 32: Hoare triple {13358#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {13302#true} is VALID [2020-07-10 15:02:11,297 INFO L280 TraceCheckUtils]: 33: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,297 INFO L275 TraceCheckUtils]: 34: Hoare quadruple {13302#true} {13302#true} #438#return; {13302#true} is VALID [2020-07-10 15:02:11,297 INFO L280 TraceCheckUtils]: 35: Hoare triple {13302#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {13302#true} is VALID [2020-07-10 15:02:11,298 INFO L280 TraceCheckUtils]: 36: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,298 INFO L275 TraceCheckUtils]: 37: Hoare quadruple {13302#true} {13302#true} #448#return; {13302#true} is VALID [2020-07-10 15:02:11,298 INFO L280 TraceCheckUtils]: 38: Hoare triple {13302#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {13302#true} is VALID [2020-07-10 15:02:11,299 INFO L263 TraceCheckUtils]: 39: Hoare triple {13302#true} call stubMoreProcessingRequired(); {13362#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:02:11,299 INFO L280 TraceCheckUtils]: 40: Hoare triple {13362#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {13302#true} is VALID [2020-07-10 15:02:11,300 INFO L280 TraceCheckUtils]: 41: Hoare triple {13302#true} assume true; {13302#true} is VALID [2020-07-10 15:02:11,300 INFO L275 TraceCheckUtils]: 42: Hoare quadruple {13302#true} {13302#true} #450#return; {13302#true} is VALID [2020-07-10 15:02:11,300 INFO L280 TraceCheckUtils]: 43: Hoare triple {13302#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {13302#true} is VALID [2020-07-10 15:02:11,301 INFO L280 TraceCheckUtils]: 44: Hoare triple {13302#true} assume !(0 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_3~0 := #t~nondet27;havoc #t~nondet27; {13302#true} is VALID [2020-07-10 15:02:11,301 INFO L280 TraceCheckUtils]: 45: Hoare triple {13302#true} assume !(1 == ~tmp_ndt_3~0); {13302#true} is VALID [2020-07-10 15:02:11,302 INFO L280 TraceCheckUtils]: 46: Hoare triple {13302#true} ~returnVal2~0 := 259; {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} is VALID [2020-07-10 15:02:11,303 INFO L280 TraceCheckUtils]: 47: Hoare triple {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} assume !(~s~0 == ~NP~0); {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} is VALID [2020-07-10 15:02:11,304 INFO L280 TraceCheckUtils]: 48: Hoare triple {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} assume ~s~0 == ~MPR1~0; {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} is VALID [2020-07-10 15:02:11,305 INFO L280 TraceCheckUtils]: 49: Hoare triple {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} is VALID [2020-07-10 15:02:11,306 INFO L280 TraceCheckUtils]: 50: Hoare triple {13356#(and (<= 259 IofCallDriver_~returnVal2~0) (<= IofCallDriver_~returnVal2~0 259))} #res := ~returnVal2~0; {13357#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2020-07-10 15:02:11,306 INFO L280 TraceCheckUtils]: 51: Hoare triple {13357#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} assume true; {13357#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2020-07-10 15:02:11,308 INFO L275 TraceCheckUtils]: 52: Hoare quadruple {13357#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} {13302#true} #468#return; {13339#(and (<= |KbFilter_PnP_#t~ret8| 259) (<= 259 |KbFilter_PnP_#t~ret8|))} is VALID [2020-07-10 15:02:11,308 INFO L280 TraceCheckUtils]: 53: Hoare triple {13339#(and (<= |KbFilter_PnP_#t~ret8| 259) (<= 259 |KbFilter_PnP_#t~ret8|))} assume -2147483648 <= #t~ret8 && #t~ret8 <= 2147483647;~status~0 := #t~ret8;havoc #t~ret8;~__cil_tmp23~0 := ~status~0; {13340#(and (<= KbFilter_PnP_~__cil_tmp23~0 259) (<= 259 KbFilter_PnP_~__cil_tmp23~0))} is VALID [2020-07-10 15:02:11,309 INFO L280 TraceCheckUtils]: 54: Hoare triple {13340#(and (<= KbFilter_PnP_~__cil_tmp23~0 259) (<= 259 KbFilter_PnP_~__cil_tmp23~0))} assume !(259 == ~__cil_tmp23~0); {13303#false} is VALID [2020-07-10 15:02:11,309 INFO L280 TraceCheckUtils]: 55: Hoare triple {13303#false} assume ~status~0 >= 0; {13303#false} is VALID [2020-07-10 15:02:11,310 INFO L280 TraceCheckUtils]: 56: Hoare triple {13303#false} assume !(~myStatus~0 >= 0); {13303#false} is VALID [2020-07-10 15:02:11,310 INFO L280 TraceCheckUtils]: 57: Hoare triple {13303#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {13303#false} is VALID [2020-07-10 15:02:11,310 INFO L263 TraceCheckUtils]: 58: Hoare triple {13303#false} call IofCompleteRequest(~Irp, 0); {13303#false} is VALID [2020-07-10 15:02:11,310 INFO L280 TraceCheckUtils]: 59: Hoare triple {13303#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {13303#false} is VALID [2020-07-10 15:02:11,310 INFO L280 TraceCheckUtils]: 60: Hoare triple {13303#false} assume !(~s~0 == ~NP~0); {13303#false} is VALID [2020-07-10 15:02:11,311 INFO L263 TraceCheckUtils]: 61: Hoare triple {13303#false} call errorFn(); {13303#false} is VALID [2020-07-10 15:02:11,311 INFO L280 TraceCheckUtils]: 62: Hoare triple {13303#false} assume !false; {13303#false} is VALID [2020-07-10 15:02:11,321 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:02:11,322 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [972182354] [2020-07-10 15:02:11,322 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:02:11,322 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2020-07-10 15:02:11,323 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1507955947] [2020-07-10 15:02:11,324 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 63 [2020-07-10 15:02:11,324 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:02:11,324 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states. [2020-07-10 15:02:11,421 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 63 edges. 63 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:02:11,422 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2020-07-10 15:02:11,422 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:02:11,422 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2020-07-10 15:02:11,423 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2020-07-10 15:02:11,423 INFO L87 Difference]: Start difference. First operand 133 states and 138 transitions. Second operand 12 states. [2020-07-10 15:02:13,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:13,019 INFO L93 Difference]: Finished difference Result 144 states and 149 transitions. [2020-07-10 15:02:13,019 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2020-07-10 15:02:13,019 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 63 [2020-07-10 15:02:13,019 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:02:13,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12 states. [2020-07-10 15:02:13,021 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 88 transitions. [2020-07-10 15:02:13,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12 states. [2020-07-10 15:02:13,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 88 transitions. [2020-07-10 15:02:13,022 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 88 transitions. [2020-07-10 15:02:13,162 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:02:13,165 INFO L225 Difference]: With dead ends: 144 [2020-07-10 15:02:13,165 INFO L226 Difference]: Without dead ends: 133 [2020-07-10 15:02:13,165 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=39, Invalid=117, Unknown=0, NotChecked=0, Total=156 [2020-07-10 15:02:13,166 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133 states. [2020-07-10 15:02:13,614 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133 to 133. [2020-07-10 15:02:13,614 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:02:13,614 INFO L82 GeneralOperation]: Start isEquivalent. First operand 133 states. Second operand 133 states. [2020-07-10 15:02:13,615 INFO L74 IsIncluded]: Start isIncluded. First operand 133 states. Second operand 133 states. [2020-07-10 15:02:13,615 INFO L87 Difference]: Start difference. First operand 133 states. Second operand 133 states. [2020-07-10 15:02:13,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:13,618 INFO L93 Difference]: Finished difference Result 133 states and 136 transitions. [2020-07-10 15:02:13,618 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 136 transitions. [2020-07-10 15:02:13,619 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:13,619 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:02:13,619 INFO L74 IsIncluded]: Start isIncluded. First operand 133 states. Second operand 133 states. [2020-07-10 15:02:13,619 INFO L87 Difference]: Start difference. First operand 133 states. Second operand 133 states. [2020-07-10 15:02:13,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:13,622 INFO L93 Difference]: Finished difference Result 133 states and 136 transitions. [2020-07-10 15:02:13,622 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 136 transitions. [2020-07-10 15:02:13,623 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:13,623 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:02:13,623 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:02:13,623 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:02:13,623 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 133 states. [2020-07-10 15:02:13,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 133 states to 133 states and 136 transitions. [2020-07-10 15:02:13,626 INFO L78 Accepts]: Start accepts. Automaton has 133 states and 136 transitions. Word has length 63 [2020-07-10 15:02:13,626 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:02:13,626 INFO L479 AbstractCegarLoop]: Abstraction has 133 states and 136 transitions. [2020-07-10 15:02:13,627 INFO L480 AbstractCegarLoop]: Interpolant automaton has 12 states. [2020-07-10 15:02:13,627 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 136 transitions. [2020-07-10 15:02:13,627 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2020-07-10 15:02:13,628 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 15:02:13,628 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 15:02:13,628 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2020-07-10 15:02:13,628 INFO L427 AbstractCegarLoop]: === Iteration 18 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 15:02:13,628 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 15:02:13,628 INFO L82 PathProgramCache]: Analyzing trace with hash 1154361885, now seen corresponding path program 1 times [2020-07-10 15:02:13,629 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 15:02:13,629 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1201579692] [2020-07-10 15:02:13,629 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 15:02:13,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:13,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:13,735 INFO L280 TraceCheckUtils]: 0: Hoare triple {14061#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14014#true} is VALID [2020-07-10 15:02:13,735 INFO L280 TraceCheckUtils]: 1: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,735 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {14014#true} {14014#true} #460#return; {14014#true} is VALID [2020-07-10 15:02:13,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:13,783 INFO L280 TraceCheckUtils]: 0: Hoare triple {14062#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14014#true} is VALID [2020-07-10 15:02:13,783 INFO L280 TraceCheckUtils]: 1: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,784 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {14014#true} {14014#true} #440#return; {14014#true} is VALID [2020-07-10 15:02:13,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:13,810 INFO L280 TraceCheckUtils]: 0: Hoare triple {14063#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14014#true} is VALID [2020-07-10 15:02:13,810 INFO L280 TraceCheckUtils]: 1: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,810 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {14014#true} {14014#true} #442#return; {14014#true} is VALID [2020-07-10 15:02:13,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:13,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:13,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:13,870 INFO L280 TraceCheckUtils]: 0: Hoare triple {14076#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {14014#true} is VALID [2020-07-10 15:02:13,870 INFO L280 TraceCheckUtils]: 1: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,870 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {14014#true} {14014#true} #438#return; {14014#true} is VALID [2020-07-10 15:02:13,871 INFO L280 TraceCheckUtils]: 0: Hoare triple {14076#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {14014#true} is VALID [2020-07-10 15:02:13,872 INFO L263 TraceCheckUtils]: 1: Hoare triple {14014#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {14076#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:13,872 INFO L280 TraceCheckUtils]: 2: Hoare triple {14076#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {14014#true} is VALID [2020-07-10 15:02:13,873 INFO L280 TraceCheckUtils]: 3: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,873 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {14014#true} {14014#true} #438#return; {14014#true} is VALID [2020-07-10 15:02:13,873 INFO L280 TraceCheckUtils]: 5: Hoare triple {14014#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {14014#true} is VALID [2020-07-10 15:02:13,874 INFO L280 TraceCheckUtils]: 6: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,874 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {14014#true} {14014#true} #448#return; {14014#true} is VALID [2020-07-10 15:02:13,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:13,899 INFO L280 TraceCheckUtils]: 0: Hoare triple {14080#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {14014#true} is VALID [2020-07-10 15:02:13,900 INFO L280 TraceCheckUtils]: 1: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,900 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {14014#true} {14014#true} #450#return; {14014#true} is VALID [2020-07-10 15:02:13,901 INFO L280 TraceCheckUtils]: 0: Hoare triple {14064#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {14014#true} is VALID [2020-07-10 15:02:13,901 INFO L280 TraceCheckUtils]: 1: Hoare triple {14014#true} assume 0 != ~compRegistered~0; {14014#true} is VALID [2020-07-10 15:02:13,902 INFO L263 TraceCheckUtils]: 2: Hoare triple {14014#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {14076#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:13,903 INFO L280 TraceCheckUtils]: 3: Hoare triple {14076#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {14014#true} is VALID [2020-07-10 15:02:13,904 INFO L263 TraceCheckUtils]: 4: Hoare triple {14014#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {14076#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:13,904 INFO L280 TraceCheckUtils]: 5: Hoare triple {14076#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {14014#true} is VALID [2020-07-10 15:02:13,904 INFO L280 TraceCheckUtils]: 6: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,905 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {14014#true} {14014#true} #438#return; {14014#true} is VALID [2020-07-10 15:02:13,905 INFO L280 TraceCheckUtils]: 8: Hoare triple {14014#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {14014#true} is VALID [2020-07-10 15:02:13,905 INFO L280 TraceCheckUtils]: 9: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,905 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {14014#true} {14014#true} #448#return; {14014#true} is VALID [2020-07-10 15:02:13,906 INFO L280 TraceCheckUtils]: 11: Hoare triple {14014#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {14014#true} is VALID [2020-07-10 15:02:13,908 INFO L263 TraceCheckUtils]: 12: Hoare triple {14014#true} call stubMoreProcessingRequired(); {14080#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:02:13,908 INFO L280 TraceCheckUtils]: 13: Hoare triple {14080#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {14014#true} is VALID [2020-07-10 15:02:13,908 INFO L280 TraceCheckUtils]: 14: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,909 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {14014#true} {14014#true} #450#return; {14014#true} is VALID [2020-07-10 15:02:13,909 INFO L280 TraceCheckUtils]: 16: Hoare triple {14014#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {14014#true} is VALID [2020-07-10 15:02:13,909 INFO L280 TraceCheckUtils]: 17: Hoare triple {14014#true} assume !(0 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_3~0 := #t~nondet27;havoc #t~nondet27; {14014#true} is VALID [2020-07-10 15:02:13,909 INFO L280 TraceCheckUtils]: 18: Hoare triple {14014#true} assume !(1 == ~tmp_ndt_3~0); {14014#true} is VALID [2020-07-10 15:02:13,910 INFO L280 TraceCheckUtils]: 19: Hoare triple {14014#true} ~returnVal2~0 := 259; {14014#true} is VALID [2020-07-10 15:02:13,910 INFO L280 TraceCheckUtils]: 20: Hoare triple {14014#true} assume !(~s~0 == ~NP~0); {14014#true} is VALID [2020-07-10 15:02:13,910 INFO L280 TraceCheckUtils]: 21: Hoare triple {14014#true} assume ~s~0 == ~MPR1~0; {14014#true} is VALID [2020-07-10 15:02:13,911 INFO L280 TraceCheckUtils]: 22: Hoare triple {14014#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {14051#(= ~MPR3~0 ~s~0)} is VALID [2020-07-10 15:02:13,912 INFO L280 TraceCheckUtils]: 23: Hoare triple {14051#(= ~MPR3~0 ~s~0)} #res := ~returnVal2~0; {14051#(= ~MPR3~0 ~s~0)} is VALID [2020-07-10 15:02:13,913 INFO L280 TraceCheckUtils]: 24: Hoare triple {14051#(= ~MPR3~0 ~s~0)} assume true; {14051#(= ~MPR3~0 ~s~0)} is VALID [2020-07-10 15:02:13,914 INFO L275 TraceCheckUtils]: 25: Hoare quadruple {14051#(= ~MPR3~0 ~s~0)} {14014#true} #468#return; {14051#(= ~MPR3~0 ~s~0)} is VALID [2020-07-10 15:02:13,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 15:02:13,957 INFO L280 TraceCheckUtils]: 0: Hoare triple {14081#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~s~0 |old(~s~0)|))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {14080#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:02:13,958 INFO L280 TraceCheckUtils]: 1: Hoare triple {14080#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~MPR3~0); {14082#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:13,959 INFO L280 TraceCheckUtils]: 2: Hoare triple {14082#(not (= ~MPR3~0 |old(~s~0)|))} assume !(1 == ~customIrp~0); {14082#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:13,960 INFO L280 TraceCheckUtils]: 3: Hoare triple {14082#(not (= ~MPR3~0 |old(~s~0)|))} assume !(~s~0 == ~MPR3~0); {14082#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:13,960 INFO L280 TraceCheckUtils]: 4: Hoare triple {14082#(not (= ~MPR3~0 |old(~s~0)|))} havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~tmp_ndt_4~0 := #t~nondet29;havoc #t~nondet29; {14082#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:13,962 INFO L280 TraceCheckUtils]: 5: Hoare triple {14082#(not (= ~MPR3~0 |old(~s~0)|))} assume 0 == ~tmp_ndt_4~0; {14082#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:13,962 INFO L280 TraceCheckUtils]: 6: Hoare triple {14082#(not (= ~MPR3~0 |old(~s~0)|))} #res := 0; {14082#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:13,963 INFO L280 TraceCheckUtils]: 7: Hoare triple {14082#(not (= ~MPR3~0 |old(~s~0)|))} assume true; {14082#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:13,965 INFO L275 TraceCheckUtils]: 8: Hoare quadruple {14082#(not (= ~MPR3~0 |old(~s~0)|))} {14051#(= ~MPR3~0 ~s~0)} #470#return; {14015#false} is VALID [2020-07-10 15:02:13,967 INFO L263 TraceCheckUtils]: 0: Hoare triple {14014#true} call ULTIMATE.init(); {14061#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:02:13,968 INFO L280 TraceCheckUtils]: 1: Hoare triple {14061#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14014#true} is VALID [2020-07-10 15:02:13,968 INFO L280 TraceCheckUtils]: 2: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,968 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {14014#true} {14014#true} #460#return; {14014#true} is VALID [2020-07-10 15:02:13,969 INFO L263 TraceCheckUtils]: 4: Hoare triple {14014#true} call #t~ret31 := main(); {14014#true} is VALID [2020-07-10 15:02:13,969 INFO L280 TraceCheckUtils]: 5: Hoare triple {14014#true} havoc ~status~1;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~irp~0 := #t~nondet19;havoc #t~nondet19;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~irp_choice~0 := #t~nondet20;havoc #t~nondet20;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~devobj~0 := #t~nondet21;havoc #t~nondet21;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {14014#true} is VALID [2020-07-10 15:02:13,971 INFO L263 TraceCheckUtils]: 6: Hoare triple {14014#true} call _BLAST_init(); {14062#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} is VALID [2020-07-10 15:02:13,971 INFO L280 TraceCheckUtils]: 7: Hoare triple {14062#(and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14014#true} is VALID [2020-07-10 15:02:13,972 INFO L280 TraceCheckUtils]: 8: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,972 INFO L275 TraceCheckUtils]: 9: Hoare quadruple {14014#true} {14014#true} #440#return; {14014#true} is VALID [2020-07-10 15:02:13,972 INFO L280 TraceCheckUtils]: 10: Hoare triple {14014#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {14014#true} is VALID [2020-07-10 15:02:13,973 INFO L280 TraceCheckUtils]: 11: Hoare triple {14014#true} assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; {14014#true} is VALID [2020-07-10 15:02:13,974 INFO L263 TraceCheckUtils]: 12: Hoare triple {14014#true} call stub_driver_init(); {14063#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:02:13,974 INFO L280 TraceCheckUtils]: 13: Hoare triple {14063#(and (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~pended~0 |old(~pended~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14014#true} is VALID [2020-07-10 15:02:13,974 INFO L280 TraceCheckUtils]: 14: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,975 INFO L275 TraceCheckUtils]: 15: Hoare quadruple {14014#true} {14014#true} #442#return; {14014#true} is VALID [2020-07-10 15:02:13,975 INFO L280 TraceCheckUtils]: 16: Hoare triple {14014#true} assume ~status~1 >= 0;~__cil_tmp8~0 := 1; {14014#true} is VALID [2020-07-10 15:02:13,975 INFO L280 TraceCheckUtils]: 17: Hoare triple {14014#true} assume !(0 == ~__cil_tmp8~0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_1~0 := #t~nondet22;havoc #t~nondet22; {14014#true} is VALID [2020-07-10 15:02:13,976 INFO L280 TraceCheckUtils]: 18: Hoare triple {14014#true} assume 3 == ~tmp_ndt_1~0; {14014#true} is VALID [2020-07-10 15:02:13,976 INFO L263 TraceCheckUtils]: 19: Hoare triple {14014#true} call #t~ret23 := KbFilter_PnP(~devobj~0, ~pirp~0); {14014#true} is VALID [2020-07-10 15:02:13,976 INFO L280 TraceCheckUtils]: 20: Hoare triple {14014#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~event~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet6;havoc #t~nondet6;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet7;havoc #t~nondet7;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {14014#true} is VALID [2020-07-10 15:02:13,977 INFO L280 TraceCheckUtils]: 21: Hoare triple {14014#true} assume 0 == ~irpStack__MinorFunction~0; {14014#true} is VALID [2020-07-10 15:02:13,977 INFO L280 TraceCheckUtils]: 22: Hoare triple {14014#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {14014#true} is VALID [2020-07-10 15:02:13,977 INFO L280 TraceCheckUtils]: 23: Hoare triple {14014#true} assume !(~s~0 != ~NP~0); {14014#true} is VALID [2020-07-10 15:02:13,977 INFO L280 TraceCheckUtils]: 24: Hoare triple {14014#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {14014#true} is VALID [2020-07-10 15:02:13,978 INFO L280 TraceCheckUtils]: 25: Hoare triple {14014#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Control~0 := 224; {14014#true} is VALID [2020-07-10 15:02:13,979 INFO L263 TraceCheckUtils]: 26: Hoare triple {14014#true} call #t~ret8 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {14064#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} is VALID [2020-07-10 15:02:13,979 INFO L280 TraceCheckUtils]: 27: Hoare triple {14064#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~lcontext~0 := #t~nondet24;havoc #t~nondet24;havoc ~__cil_tmp7~0; {14014#true} is VALID [2020-07-10 15:02:13,980 INFO L280 TraceCheckUtils]: 28: Hoare triple {14014#true} assume 0 != ~compRegistered~0; {14014#true} is VALID [2020-07-10 15:02:13,982 INFO L263 TraceCheckUtils]: 29: Hoare triple {14014#true} call #t~ret25 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {14076#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:13,982 INFO L280 TraceCheckUtils]: 30: Hoare triple {14076#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {14014#true} is VALID [2020-07-10 15:02:13,984 INFO L263 TraceCheckUtils]: 31: Hoare triple {14014#true} call #t~ret30 := KeSetEvent(~event~1, 0, 0); {14076#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2020-07-10 15:02:13,984 INFO L280 TraceCheckUtils]: 32: Hoare triple {14076#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~l~0 := #t~nondet28;havoc #t~nondet28;~setEventCalled~0 := 1;#res := ~l~0; {14014#true} is VALID [2020-07-10 15:02:13,985 INFO L280 TraceCheckUtils]: 33: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,985 INFO L275 TraceCheckUtils]: 34: Hoare quadruple {14014#true} {14014#true} #438#return; {14014#true} is VALID [2020-07-10 15:02:13,985 INFO L280 TraceCheckUtils]: 35: Hoare triple {14014#true} assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;havoc #t~ret30;#res := -1073741802; {14014#true} is VALID [2020-07-10 15:02:13,985 INFO L280 TraceCheckUtils]: 36: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,986 INFO L275 TraceCheckUtils]: 37: Hoare quadruple {14014#true} {14014#true} #448#return; {14014#true} is VALID [2020-07-10 15:02:13,986 INFO L280 TraceCheckUtils]: 38: Hoare triple {14014#true} assume -2147483648 <= #t~ret25 && #t~ret25 <= 2147483647;~compRetStatus~0 := #t~ret25;havoc #t~ret25; {14014#true} is VALID [2020-07-10 15:02:13,987 INFO L263 TraceCheckUtils]: 39: Hoare triple {14014#true} call stubMoreProcessingRequired(); {14080#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:02:13,987 INFO L280 TraceCheckUtils]: 40: Hoare triple {14080#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {14014#true} is VALID [2020-07-10 15:02:13,988 INFO L280 TraceCheckUtils]: 41: Hoare triple {14014#true} assume true; {14014#true} is VALID [2020-07-10 15:02:13,988 INFO L275 TraceCheckUtils]: 42: Hoare quadruple {14014#true} {14014#true} #450#return; {14014#true} is VALID [2020-07-10 15:02:13,988 INFO L280 TraceCheckUtils]: 43: Hoare triple {14014#true} havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_2~0 := #t~nondet26;havoc #t~nondet26; {14014#true} is VALID [2020-07-10 15:02:13,988 INFO L280 TraceCheckUtils]: 44: Hoare triple {14014#true} assume !(0 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_3~0 := #t~nondet27;havoc #t~nondet27; {14014#true} is VALID [2020-07-10 15:02:13,989 INFO L280 TraceCheckUtils]: 45: Hoare triple {14014#true} assume !(1 == ~tmp_ndt_3~0); {14014#true} is VALID [2020-07-10 15:02:13,989 INFO L280 TraceCheckUtils]: 46: Hoare triple {14014#true} ~returnVal2~0 := 259; {14014#true} is VALID [2020-07-10 15:02:13,989 INFO L280 TraceCheckUtils]: 47: Hoare triple {14014#true} assume !(~s~0 == ~NP~0); {14014#true} is VALID [2020-07-10 15:02:13,989 INFO L280 TraceCheckUtils]: 48: Hoare triple {14014#true} assume ~s~0 == ~MPR1~0; {14014#true} is VALID [2020-07-10 15:02:13,990 INFO L280 TraceCheckUtils]: 49: Hoare triple {14014#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {14051#(= ~MPR3~0 ~s~0)} is VALID [2020-07-10 15:02:13,991 INFO L280 TraceCheckUtils]: 50: Hoare triple {14051#(= ~MPR3~0 ~s~0)} #res := ~returnVal2~0; {14051#(= ~MPR3~0 ~s~0)} is VALID [2020-07-10 15:02:13,992 INFO L280 TraceCheckUtils]: 51: Hoare triple {14051#(= ~MPR3~0 ~s~0)} assume true; {14051#(= ~MPR3~0 ~s~0)} is VALID [2020-07-10 15:02:13,993 INFO L275 TraceCheckUtils]: 52: Hoare quadruple {14051#(= ~MPR3~0 ~s~0)} {14014#true} #468#return; {14051#(= ~MPR3~0 ~s~0)} is VALID [2020-07-10 15:02:13,994 INFO L280 TraceCheckUtils]: 53: Hoare triple {14051#(= ~MPR3~0 ~s~0)} assume -2147483648 <= #t~ret8 && #t~ret8 <= 2147483647;~status~0 := #t~ret8;havoc #t~ret8;~__cil_tmp23~0 := ~status~0; {14051#(= ~MPR3~0 ~s~0)} is VALID [2020-07-10 15:02:13,996 INFO L280 TraceCheckUtils]: 54: Hoare triple {14051#(= ~MPR3~0 ~s~0)} assume 259 == ~__cil_tmp23~0; {14051#(= ~MPR3~0 ~s~0)} is VALID [2020-07-10 15:02:13,997 INFO L263 TraceCheckUtils]: 55: Hoare triple {14051#(= ~MPR3~0 ~s~0)} call #t~ret9 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {14081#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:13,998 INFO L280 TraceCheckUtils]: 56: Hoare triple {14081#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~s~0 |old(~s~0)|))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {14080#(= ~s~0 |old(~s~0)|)} is VALID [2020-07-10 15:02:13,999 INFO L280 TraceCheckUtils]: 57: Hoare triple {14080#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~MPR3~0); {14082#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:14,000 INFO L280 TraceCheckUtils]: 58: Hoare triple {14082#(not (= ~MPR3~0 |old(~s~0)|))} assume !(1 == ~customIrp~0); {14082#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:14,000 INFO L280 TraceCheckUtils]: 59: Hoare triple {14082#(not (= ~MPR3~0 |old(~s~0)|))} assume !(~s~0 == ~MPR3~0); {14082#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:14,001 INFO L280 TraceCheckUtils]: 60: Hoare triple {14082#(not (= ~MPR3~0 |old(~s~0)|))} havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~tmp_ndt_4~0 := #t~nondet29;havoc #t~nondet29; {14082#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:14,002 INFO L280 TraceCheckUtils]: 61: Hoare triple {14082#(not (= ~MPR3~0 |old(~s~0)|))} assume 0 == ~tmp_ndt_4~0; {14082#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:14,002 INFO L280 TraceCheckUtils]: 62: Hoare triple {14082#(not (= ~MPR3~0 |old(~s~0)|))} #res := 0; {14082#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:14,003 INFO L280 TraceCheckUtils]: 63: Hoare triple {14082#(not (= ~MPR3~0 |old(~s~0)|))} assume true; {14082#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2020-07-10 15:02:14,005 INFO L275 TraceCheckUtils]: 64: Hoare quadruple {14082#(not (= ~MPR3~0 |old(~s~0)|))} {14051#(= ~MPR3~0 ~s~0)} #470#return; {14015#false} is VALID [2020-07-10 15:02:14,005 INFO L280 TraceCheckUtils]: 65: Hoare triple {14015#false} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;havoc #t~ret9; {14015#false} is VALID [2020-07-10 15:02:14,006 INFO L280 TraceCheckUtils]: 66: Hoare triple {14015#false} assume ~status~0 >= 0; {14015#false} is VALID [2020-07-10 15:02:14,006 INFO L280 TraceCheckUtils]: 67: Hoare triple {14015#false} assume !(~myStatus~0 >= 0); {14015#false} is VALID [2020-07-10 15:02:14,006 INFO L280 TraceCheckUtils]: 68: Hoare triple {14015#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {14015#false} is VALID [2020-07-10 15:02:14,006 INFO L263 TraceCheckUtils]: 69: Hoare triple {14015#false} call IofCompleteRequest(~Irp, 0); {14015#false} is VALID [2020-07-10 15:02:14,007 INFO L280 TraceCheckUtils]: 70: Hoare triple {14015#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14015#false} is VALID [2020-07-10 15:02:14,007 INFO L280 TraceCheckUtils]: 71: Hoare triple {14015#false} assume !(~s~0 == ~NP~0); {14015#false} is VALID [2020-07-10 15:02:14,007 INFO L263 TraceCheckUtils]: 72: Hoare triple {14015#false} call errorFn(); {14015#false} is VALID [2020-07-10 15:02:14,008 INFO L280 TraceCheckUtils]: 73: Hoare triple {14015#false} assume !false; {14015#false} is VALID [2020-07-10 15:02:14,020 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 15:02:14,021 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1201579692] [2020-07-10 15:02:14,021 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 15:02:14,021 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2020-07-10 15:02:14,025 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [111612460] [2020-07-10 15:02:14,027 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 74 [2020-07-10 15:02:14,028 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 15:02:14,028 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states. [2020-07-10 15:02:14,140 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:02:14,141 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2020-07-10 15:02:14,141 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 15:02:14,141 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2020-07-10 15:02:14,142 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=72, Unknown=0, NotChecked=0, Total=110 [2020-07-10 15:02:14,142 INFO L87 Difference]: Start difference. First operand 133 states and 136 transitions. Second operand 11 states. [2020-07-10 15:02:15,352 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:15,352 INFO L93 Difference]: Finished difference Result 133 states and 136 transitions. [2020-07-10 15:02:15,352 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-10 15:02:15,352 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 74 [2020-07-10 15:02:15,353 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 15:02:15,353 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11 states. [2020-07-10 15:02:15,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 78 transitions. [2020-07-10 15:02:15,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11 states. [2020-07-10 15:02:15,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 78 transitions. [2020-07-10 15:02:15,356 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 78 transitions. [2020-07-10 15:02:15,464 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 78 edges. 78 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 15:02:15,465 INFO L225 Difference]: With dead ends: 133 [2020-07-10 15:02:15,465 INFO L226 Difference]: Without dead ends: 0 [2020-07-10 15:02:15,466 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=58, Invalid=98, Unknown=0, NotChecked=0, Total=156 [2020-07-10 15:02:15,466 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-10 15:02:15,467 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-10 15:02:15,467 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 15:02:15,467 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-10 15:02:15,467 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-10 15:02:15,467 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-10 15:02:15,467 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:15,467 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-10 15:02:15,468 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-10 15:02:15,468 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:15,468 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:02:15,468 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-10 15:02:15,468 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-10 15:02:15,468 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 15:02:15,469 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-10 15:02:15,469 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-10 15:02:15,469 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:15,469 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 15:02:15,471 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 15:02:15,471 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 15:02:15,471 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-10 15:02:15,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-10 15:02:15,472 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 74 [2020-07-10 15:02:15,472 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 15:02:15,472 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-10 15:02:15,472 INFO L480 AbstractCegarLoop]: Interpolant automaton has 11 states. [2020-07-10 15:02:15,472 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-10 15:02:15,472 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 15:02:15,472 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2020-07-10 15:02:15,475 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-10 15:02:16,627 WARN L193 SmtUtils]: Spent 223.00 ms on a formula simplification. DAG size of input: 87 DAG size of output: 51 [2020-07-10 15:02:16,889 WARN L193 SmtUtils]: Spent 170.00 ms on a formula simplification. DAG size of input: 82 DAG size of output: 48 [2020-07-10 15:02:17,172 WARN L193 SmtUtils]: Spent 193.00 ms on a formula simplification. DAG size of input: 90 DAG size of output: 43 [2020-07-10 15:02:17,562 WARN L193 SmtUtils]: Spent 251.00 ms on a formula simplification. DAG size of input: 90 DAG size of output: 56 [2020-07-10 15:02:17,688 WARN L193 SmtUtils]: Spent 112.00 ms on a formula simplification. DAG size of input: 85 DAG size of output: 62 [2020-07-10 15:02:18,107 WARN L193 SmtUtils]: Spent 233.00 ms on a formula simplification. DAG size of input: 88 DAG size of output: 50 [2020-07-10 15:02:18,265 WARN L193 SmtUtils]: Spent 137.00 ms on a formula simplification. DAG size of input: 71 DAG size of output: 34 [2020-07-10 15:02:18,570 WARN L193 SmtUtils]: Spent 171.00 ms on a formula simplification. DAG size of input: 87 DAG size of output: 49 [2020-07-10 15:02:18,995 WARN L193 SmtUtils]: Spent 153.00 ms on a formula simplification. DAG size of input: 75 DAG size of output: 36 [2020-07-10 15:02:19,196 WARN L193 SmtUtils]: Spent 178.00 ms on a formula simplification. DAG size of input: 81 DAG size of output: 47 [2020-07-10 15:02:19,448 WARN L193 SmtUtils]: Spent 223.00 ms on a formula simplification. DAG size of input: 83 DAG size of output: 49 [2020-07-10 15:02:19,649 WARN L193 SmtUtils]: Spent 174.00 ms on a formula simplification. DAG size of input: 82 DAG size of output: 48 [2020-07-10 15:02:19,800 WARN L193 SmtUtils]: Spent 137.00 ms on a formula simplification. DAG size of input: 71 DAG size of output: 34 [2020-07-10 15:02:20,279 WARN L193 SmtUtils]: Spent 230.00 ms on a formula simplification. DAG size of input: 68 DAG size of output: 62 [2020-07-10 15:02:20,475 WARN L193 SmtUtils]: Spent 172.00 ms on a formula simplification. DAG size of input: 87 DAG size of output: 49 [2020-07-10 15:02:20,654 WARN L193 SmtUtils]: Spent 163.00 ms on a formula simplification. DAG size of input: 84 DAG size of output: 49 [2020-07-10 15:02:20,834 WARN L193 SmtUtils]: Spent 167.00 ms on a formula simplification. DAG size of input: 66 DAG size of output: 56 [2020-07-10 15:02:20,969 WARN L193 SmtUtils]: Spent 124.00 ms on a formula simplification. DAG size of input: 88 DAG size of output: 71 [2020-07-10 15:02:21,190 WARN L193 SmtUtils]: Spent 202.00 ms on a formula simplification. DAG size of input: 90 DAG size of output: 43 [2020-07-10 15:02:21,433 WARN L193 SmtUtils]: Spent 168.00 ms on a formula simplification. DAG size of input: 84 DAG size of output: 49 [2020-07-10 15:02:21,557 WARN L193 SmtUtils]: Spent 104.00 ms on a formula simplification. DAG size of input: 57 DAG size of output: 43 [2020-07-10 15:02:21,780 WARN L193 SmtUtils]: Spent 173.00 ms on a formula simplification. DAG size of input: 84 DAG size of output: 49 [2020-07-10 15:02:22,120 WARN L193 SmtUtils]: Spent 169.00 ms on a formula simplification. DAG size of input: 86 DAG size of output: 48 [2020-07-10 15:02:22,293 WARN L193 SmtUtils]: Spent 146.00 ms on a formula simplification. DAG size of input: 84 DAG size of output: 50 [2020-07-10 15:02:22,588 WARN L193 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 51 DAG size of output: 40 [2020-07-10 15:02:22,740 WARN L193 SmtUtils]: Spent 138.00 ms on a formula simplification. DAG size of input: 71 DAG size of output: 34 [2020-07-10 15:02:22,797 INFO L264 CegarLoopResult]: At program point KeSetEventENTRY(lines 513 520) the Hoare annotation is: (or (not (= ~s~0 ~NP~0)) (not (<= 1 ~NP~0)) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (not (<= 1 ~compRegistered~0))) [2020-07-10 15:02:22,797 INFO L268 CegarLoopResult]: For program point KeSetEventFINAL(lines 513 520) no Hoare annotation was computed. [2020-07-10 15:02:22,797 INFO L268 CegarLoopResult]: For program point KeSetEventEXIT(lines 513 520) no Hoare annotation was computed. [2020-07-10 15:02:22,798 INFO L264 CegarLoopResult]: At program point KbFilter_CompleteENTRY(lines 563 573) the Hoare annotation is: (or (not (= ~s~0 ~NP~0)) (not (<= 1 ~NP~0)) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (not (<= 1 ~compRegistered~0))) [2020-07-10 15:02:22,798 INFO L264 CegarLoopResult]: At program point L569(line 569) the Hoare annotation is: (or (not (= ~s~0 ~NP~0)) (not (<= 1 ~NP~0)) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (not (<= 1 ~compRegistered~0))) [2020-07-10 15:02:22,798 INFO L268 CegarLoopResult]: For program point L569-1(line 569) no Hoare annotation was computed. [2020-07-10 15:02:22,799 INFO L268 CegarLoopResult]: For program point KbFilter_CompleteFINAL(lines 563 573) no Hoare annotation was computed. [2020-07-10 15:02:22,799 INFO L268 CegarLoopResult]: For program point KbFilter_CompleteEXIT(lines 563 573) no Hoare annotation was computed. [2020-07-10 15:02:22,799 INFO L268 CegarLoopResult]: For program point stub_driver_initEXIT(lines 35 48) no Hoare annotation was computed. [2020-07-10 15:02:22,799 INFO L264 CegarLoopResult]: At program point stub_driver_initENTRY(lines 35 48) the Hoare annotation is: (or (and (= ~pended~0 |old(~pended~0)|) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~s~0 ~NP~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= |old(~customIrp~0)| ~customIrp~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|)) (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (= 1 |old(~pended~0)|) (not (= 0 |old(~compRegistered~0)|))) [2020-07-10 15:02:22,799 INFO L268 CegarLoopResult]: For program point stub_driver_initFINAL(lines 35 48) no Hoare annotation was computed. [2020-07-10 15:02:22,799 INFO L268 CegarLoopResult]: For program point _BLAST_initFINAL(lines 49 70) no Hoare annotation was computed. [2020-07-10 15:02:22,800 INFO L264 CegarLoopResult]: At program point _BLAST_initENTRY(lines 49 70) the Hoare annotation is: (or (not (= |old(~NP~0)| |old(~MPR1~0)|)) (and (= ~pended~0 |old(~pended~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~MPR1~0 ~s~0) (= ~compFptr~0 |old(~compFptr~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~MPR1~0 ~NP~0) (= ~MPR3~0 ~s~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~SKIP1~0 ~s~0) (= ~MPR3~0 |old(~MPR3~0)|)) (not (= |old(~SKIP1~0)| |old(~s~0)|)) (= 1 |old(~pended~0)|) (not (= 0 |old(~compRegistered~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|)) (not (<= |old(~IPC~0)| |old(~s~0)|))) [2020-07-10 15:02:22,800 INFO L268 CegarLoopResult]: For program point _BLAST_initEXIT(lines 49 70) no Hoare annotation was computed. [2020-07-10 15:02:22,800 INFO L271 CegarLoopResult]: At program point errorFnENTRY(lines 575 582) the Hoare annotation is: true [2020-07-10 15:02:22,800 INFO L268 CegarLoopResult]: For program point errorFnFINAL(lines 575 582) no Hoare annotation was computed. [2020-07-10 15:02:22,800 INFO L268 CegarLoopResult]: For program point errorFnEXIT(lines 575 582) no Hoare annotation was computed. [2020-07-10 15:02:22,800 INFO L268 CegarLoopResult]: For program point errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION(line 579) no Hoare annotation was computed. [2020-07-10 15:02:22,801 INFO L264 CegarLoopResult]: At program point L382(lines 375 415) the Hoare annotation is: (or (and (not (= 1 ~pended~0)) (<= (+ ~SKIP2~0 3) ~IPC~0) (<= (+ ~NP~0 2) ~SKIP1~0)) (not (= |old(~NP~0)| |old(~MPR1~0)|)) (not (= |old(~SKIP1~0)| |old(~s~0)|)) (= 1 |old(~pended~0)|) (not (= 0 |old(~compRegistered~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|)) (not (<= |old(~IPC~0)| |old(~s~0)|))) [2020-07-10 15:02:22,801 INFO L268 CegarLoopResult]: For program point mainEXIT(lines 286 420) no Hoare annotation was computed. [2020-07-10 15:02:22,801 INFO L268 CegarLoopResult]: For program point L407(lines 407 409) no Hoare annotation was computed. [2020-07-10 15:02:22,801 INFO L264 CegarLoopResult]: At program point L374(lines 367 416) the Hoare annotation is: (or (and (not (= 1 ~pended~0)) (<= (+ ~SKIP2~0 3) ~IPC~0) (<= (+ ~NP~0 2) ~SKIP1~0)) (not (= |old(~NP~0)| |old(~MPR1~0)|)) (not (= |old(~SKIP1~0)| |old(~s~0)|)) (= 1 |old(~pended~0)|) (not (= 0 |old(~compRegistered~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|)) (not (<= |old(~IPC~0)| |old(~s~0)|))) [2020-07-10 15:02:22,801 INFO L268 CegarLoopResult]: For program point L383(lines 367 416) no Hoare annotation was computed. [2020-07-10 15:02:22,801 INFO L268 CegarLoopResult]: For program point L350(lines 350 365) no Hoare annotation was computed. [2020-07-10 15:02:22,801 INFO L268 CegarLoopResult]: For program point L384(lines 384 413) no Hoare annotation was computed. [2020-07-10 15:02:22,802 INFO L264 CegarLoopResult]: At program point L351(lines 350 365) the Hoare annotation is: (or (not (= |old(~NP~0)| |old(~MPR1~0)|)) (not (= |old(~SKIP1~0)| |old(~s~0)|)) (= 1 |old(~pended~0)|) (not (= 0 |old(~compRegistered~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|)) (and (<= 1 ~NP~0) (<= ~NP~0 1) (= ~s~0 ~NP~0) (<= 0 main_~status~1) (not (= 1 ~pended~0)) (= 0 ~compRegistered~0) (<= (+ ~NP~0 4) ~MPR1~0) (<= (+ ~SKIP2~0 3) ~IPC~0) (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= |old(~IPC~0)| |old(~s~0)|))) [2020-07-10 15:02:22,802 INFO L268 CegarLoopResult]: For program point L376(lines 376 380) no Hoare annotation was computed. [2020-07-10 15:02:22,802 INFO L268 CegarLoopResult]: For program point L368(lines 368 372) no Hoare annotation was computed. [2020-07-10 15:02:22,802 INFO L268 CegarLoopResult]: For program point L335(lines 321 366) no Hoare annotation was computed. [2020-07-10 15:02:22,802 INFO L268 CegarLoopResult]: For program point mainFINAL(lines 286 420) no Hoare annotation was computed. [2020-07-10 15:02:22,802 INFO L268 CegarLoopResult]: For program point L385(lines 385 412) no Hoare annotation was computed. [2020-07-10 15:02:22,803 INFO L264 CegarLoopResult]: At program point L319(line 319) the Hoare annotation is: (or (and (= ~MPR1~0 ~s~0) (<= 0 main_~status~1) (not (= 1 ~pended~0)) (<= ~IPC~0 ~s~0) (= ~MPR1~0 ~NP~0) (= ~MPR3~0 ~s~0) (= 0 ~compRegistered~0) (= ~SKIP1~0 ~s~0)) (not (= |old(~NP~0)| |old(~MPR1~0)|)) (not (= |old(~SKIP1~0)| |old(~s~0)|)) (= 1 |old(~pended~0)|) (not (= 0 |old(~compRegistered~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|)) (not (<= |old(~IPC~0)| |old(~s~0)|))) [2020-07-10 15:02:22,803 INFO L268 CegarLoopResult]: For program point L319-1(lines 295 419) no Hoare annotation was computed. [2020-07-10 15:02:22,803 INFO L264 CegarLoopResult]: At program point mainENTRY(lines 286 420) the Hoare annotation is: (or (not (= |old(~NP~0)| |old(~MPR1~0)|)) (not (= |old(~SKIP1~0)| |old(~s~0)|)) (= 1 |old(~pended~0)|) (not (= 0 |old(~compRegistered~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|)) (and (= ~pended~0 |old(~pended~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~MPR1~0 ~s~0) (= ~compFptr~0 |old(~compFptr~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~MPR1~0 ~NP~0) (= ~MPR3~0 ~s~0) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~customIrp~0)| ~customIrp~0) (= ~SKIP1~0 ~s~0) (= |old(~Executive~0)| ~Executive~0) (= ~MPR3~0 |old(~MPR3~0)|)) (not (<= |old(~IPC~0)| |old(~s~0)|))) [2020-07-10 15:02:22,803 INFO L268 CegarLoopResult]: For program point L402(lines 402 410) no Hoare annotation was computed. [2020-07-10 15:02:22,803 INFO L264 CegarLoopResult]: At program point L394(lines 385 412) the Hoare annotation is: (or (and (not (= 1 ~pended~0)) (<= (+ ~SKIP2~0 3) ~IPC~0) (<= (+ ~NP~0 2) ~SKIP1~0)) (not (= |old(~NP~0)| |old(~MPR1~0)|)) (not (= |old(~SKIP1~0)| |old(~s~0)|)) (= 1 |old(~pended~0)|) (not (= 0 |old(~compRegistered~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|)) (not (<= |old(~IPC~0)| |old(~s~0)|))) [2020-07-10 15:02:22,803 INFO L268 CegarLoopResult]: For program point L386(lines 386 392) no Hoare annotation was computed. [2020-07-10 15:02:22,804 INFO L264 CegarLoopResult]: At program point L353(lines 352 365) the Hoare annotation is: (or (not (= |old(~NP~0)| |old(~MPR1~0)|)) (<= 0 main_~status~1) (not (= |old(~SKIP1~0)| |old(~s~0)|)) (= 1 |old(~pended~0)|) (not (= 0 |old(~compRegistered~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|)) (not (<= |old(~IPC~0)| |old(~s~0)|))) [2020-07-10 15:02:22,804 INFO L268 CegarLoopResult]: For program point L403(lines 403 405) no Hoare annotation was computed. [2020-07-10 15:02:22,804 INFO L268 CegarLoopResult]: For program point L387(lines 387 389) no Hoare annotation was computed. [2020-07-10 15:02:22,804 INFO L264 CegarLoopResult]: At program point L321(lines 295 419) the Hoare annotation is: (or (and (not (= 1 ~pended~0)) (<= (+ ~SKIP2~0 3) ~IPC~0) (<= (+ ~NP~0 2) ~SKIP1~0)) (not (= |old(~NP~0)| |old(~MPR1~0)|)) (not (= |old(~SKIP1~0)| |old(~s~0)|)) (= 1 |old(~pended~0)|) (not (= 0 |old(~compRegistered~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|)) (not (<= |old(~IPC~0)| |old(~s~0)|))) [2020-07-10 15:02:22,804 INFO L268 CegarLoopResult]: For program point L338-1(lines 337 347) no Hoare annotation was computed. [2020-07-10 15:02:22,804 INFO L268 CegarLoopResult]: For program point L396(lines 396 400) no Hoare annotation was computed. [2020-07-10 15:02:22,804 INFO L268 CegarLoopResult]: For program point L330(lines 330 333) no Hoare annotation was computed. [2020-07-10 15:02:22,805 INFO L264 CegarLoopResult]: At program point L330-2(lines 330 333) the Hoare annotation is: (or (not (= |old(~NP~0)| |old(~MPR1~0)|)) (not (= |old(~SKIP1~0)| |old(~s~0)|)) (= 1 |old(~pended~0)|) (not (= 0 |old(~compRegistered~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|)) (and (<= 1 ~NP~0) (<= ~NP~0 1) (= ~s~0 ~NP~0) (<= 0 main_~status~1) (not (= 1 ~pended~0)) (= 0 ~compRegistered~0) (<= (+ ~NP~0 4) ~MPR1~0) (<= (+ ~SKIP2~0 3) ~IPC~0) (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= |old(~IPC~0)| |old(~s~0)|))) [2020-07-10 15:02:22,805 INFO L264 CegarLoopResult]: At program point L398(line 398) the Hoare annotation is: (or (not (= |old(~NP~0)| |old(~MPR1~0)|)) (not (= |old(~SKIP1~0)| |old(~s~0)|)) (= 1 |old(~pended~0)|) (not (= 0 |old(~compRegistered~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|)) (not (<= |old(~IPC~0)| |old(~s~0)|))) [2020-07-10 15:02:22,805 INFO L268 CegarLoopResult]: For program point L357(line 357) no Hoare annotation was computed. [2020-07-10 15:02:22,805 INFO L268 CegarLoopResult]: For program point L477(lines 477 494) no Hoare annotation was computed. [2020-07-10 15:02:22,805 INFO L264 CegarLoopResult]: At program point L444(line 444) the Hoare annotation is: (let ((.cse0 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse1 (= 1 ~pended~0)) (.cse2 (not (<= (+ ~SKIP2~0 3) ~IPC~0)))) (and (or (not (= ~SKIP1~0 |old(~s~0)|)) .cse0 .cse1 (not (= 0 ~compRegistered~0)) .cse2) (or (not (<= 1 ~NP~0)) (and (= ~s~0 ~NP~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|)) .cse0 (not (<= (+ ~NP~0 4) ~MPR1~0)) .cse1 (not (= ~NP~0 |old(~s~0)|)) .cse2 (not (<= ~NP~0 1)) (not (<= 1 ~compRegistered~0))))) [2020-07-10 15:02:22,805 INFO L268 CegarLoopResult]: For program point L444-1(line 444) no Hoare annotation was computed. [2020-07-10 15:02:22,806 INFO L264 CegarLoopResult]: At program point L469(lines 442 497) the Hoare annotation is: (let ((.cse1 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse2 (= 1 ~pended~0)) (.cse3 (not (<= (+ ~SKIP2~0 3) ~IPC~0)))) (and (let ((.cse0 (= ~MPR1~0 ~s~0))) (or (not (<= 1 ~NP~0)) (and .cse0 (<= 259 IofCallDriver_~returnVal2~0) (= ~setEventCalled~0 1) (<= IofCallDriver_~returnVal2~0 259)) (and (<= IofCallDriver_~returnVal2~0 0) .cse0) .cse1 (not (<= (+ ~NP~0 4) ~MPR1~0)) .cse2 (not (= ~NP~0 |old(~s~0)|)) .cse3 (not (<= ~NP~0 1)) (not (<= 1 ~compRegistered~0)))) (or (not (= ~SKIP1~0 |old(~s~0)|)) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~SKIP1~0 ~s~0)) .cse1 .cse2 (not (= 0 ~compRegistered~0)) .cse3))) [2020-07-10 15:02:22,806 INFO L264 CegarLoopResult]: At program point L457(lines 456 471) the Hoare annotation is: (let ((.cse0 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse1 (= 1 ~pended~0)) (.cse2 (not (<= (+ ~SKIP2~0 3) ~IPC~0)))) (and (or (not (= ~SKIP1~0 |old(~s~0)|)) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~SKIP1~0 ~s~0)) .cse0 .cse1 (not (= 0 ~compRegistered~0)) .cse2) (or (not (<= 1 ~NP~0)) .cse0 (not (<= (+ ~NP~0 4) ~MPR1~0)) .cse1 (not (= ~NP~0 |old(~s~0)|)) .cse2 (not (<= ~NP~0 1)) (and (= ~MPR1~0 ~s~0) (= ~setEventCalled~0 1)) (not (<= 1 ~compRegistered~0))))) [2020-07-10 15:02:22,806 INFO L268 CegarLoopResult]: For program point L486(lines 486 493) no Hoare annotation was computed. [2020-07-10 15:02:22,806 INFO L268 CegarLoopResult]: For program point L449(lines 449 472) no Hoare annotation was computed. [2020-07-10 15:02:22,806 INFO L268 CegarLoopResult]: For program point L478(lines 478 484) no Hoare annotation was computed. [2020-07-10 15:02:22,807 INFO L264 CegarLoopResult]: At program point L445(line 445) the Hoare annotation is: (let ((.cse0 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse1 (= 1 ~pended~0)) (.cse2 (not (<= (+ ~SKIP2~0 3) ~IPC~0)))) (and (or (not (= ~SKIP1~0 |old(~s~0)|)) .cse0 .cse1 (not (= 0 ~compRegistered~0)) .cse2) (or (not (<= 1 ~NP~0)) .cse0 (not (<= (+ ~NP~0 4) ~MPR1~0)) .cse1 (and (= ~s~0 |old(~s~0)|) (= ~setEventCalled~0 1)) (not (= ~NP~0 |old(~s~0)|)) .cse2 (not (<= ~NP~0 1)) (not (<= 1 ~compRegistered~0))))) [2020-07-10 15:02:22,807 INFO L264 CegarLoopResult]: At program point IofCallDriverENTRY(lines 435 498) the Hoare annotation is: (let ((.cse0 (= ~setEventCalled~0 |old(~setEventCalled~0)|)) (.cse1 (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|)) (.cse2 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse3 (= 1 ~pended~0)) (.cse4 (not (<= (+ ~SKIP2~0 3) ~IPC~0)))) (and (or (not (= ~SKIP1~0 |old(~s~0)|)) (and .cse0 .cse1 (= ~SKIP1~0 ~s~0)) .cse2 .cse3 (not (= 0 ~compRegistered~0)) .cse4) (or (not (<= 1 ~NP~0)) (and (= ~s~0 ~NP~0) .cse0 .cse1) .cse2 (not (<= (+ ~NP~0 4) ~MPR1~0)) .cse3 (not (= ~NP~0 |old(~s~0)|)) .cse4 (not (<= ~NP~0 1)) (not (<= 1 ~compRegistered~0))))) [2020-07-10 15:02:22,807 INFO L264 CegarLoopResult]: At program point L491(line 491) the Hoare annotation is: (let ((.cse0 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse1 (= 1 ~pended~0)) (.cse2 (not (<= (+ ~SKIP2~0 3) ~IPC~0)))) (and (or (not (= ~SKIP1~0 |old(~s~0)|)) .cse0 .cse1 (not (= 0 ~compRegistered~0)) .cse2) (or (not (<= 1 ~NP~0)) .cse0 (not (<= (+ ~NP~0 4) ~MPR1~0)) .cse1 (not (= ~NP~0 |old(~s~0)|)) .cse2 (not (<= ~NP~0 1)) (not (<= 1 ~compRegistered~0))))) [2020-07-10 15:02:22,807 INFO L268 CegarLoopResult]: For program point L491-1(lines 473 495) no Hoare annotation was computed. [2020-07-10 15:02:22,808 INFO L268 CegarLoopResult]: For program point L454(lines 454 471) no Hoare annotation was computed. [2020-07-10 15:02:22,808 INFO L264 CegarLoopResult]: At program point L450(lines 449 472) the Hoare annotation is: (let ((.cse0 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse1 (= 1 ~pended~0)) (.cse2 (not (<= (+ ~SKIP2~0 3) ~IPC~0)))) (and (or (not (= ~SKIP1~0 |old(~s~0)|)) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~SKIP1~0 ~s~0)) .cse0 .cse1 (not (= 0 ~compRegistered~0)) .cse2) (or (not (<= 1 ~NP~0)) (= ~MPR1~0 ~s~0) .cse0 (not (<= (+ ~NP~0 4) ~MPR1~0)) .cse1 (not (= ~NP~0 |old(~s~0)|)) .cse2 (not (<= ~NP~0 1)) (not (<= 1 ~compRegistered~0))))) [2020-07-10 15:02:22,808 INFO L268 CegarLoopResult]: For program point IofCallDriverFINAL(lines 435 498) no Hoare annotation was computed. [2020-07-10 15:02:22,808 INFO L268 CegarLoopResult]: For program point IofCallDriverEXIT(lines 435 498) no Hoare annotation was computed. [2020-07-10 15:02:22,808 INFO L264 CegarLoopResult]: At program point L455(lines 454 471) the Hoare annotation is: (let ((.cse0 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse1 (= 1 ~pended~0)) (.cse2 (not (<= (+ ~SKIP2~0 3) ~IPC~0)))) (and (or (not (= ~SKIP1~0 |old(~s~0)|)) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~SKIP1~0 ~s~0)) .cse0 .cse1 (not (= 0 ~compRegistered~0)) .cse2) (or (not (<= 1 ~NP~0)) (= ~MPR1~0 ~s~0) .cse0 (not (<= (+ ~NP~0 4) ~MPR1~0)) .cse1 (not (= ~NP~0 |old(~s~0)|)) .cse2 (not (<= ~NP~0 1)) (not (<= 1 ~compRegistered~0))))) [2020-07-10 15:02:22,809 INFO L268 CegarLoopResult]: For program point L443(lines 443 446) no Hoare annotation was computed. [2020-07-10 15:02:22,809 INFO L268 CegarLoopResult]: For program point L443-1(lines 443 446) no Hoare annotation was computed. [2020-07-10 15:02:22,809 INFO L264 CegarLoopResult]: At program point L429(line 429) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (not (= ~setEventCalled~0 1)) (not (<= 1 ~compRegistered~0))) [2020-07-10 15:02:22,809 INFO L268 CegarLoopResult]: For program point L429-1(lines 421 434) no Hoare annotation was computed. [2020-07-10 15:02:22,809 INFO L264 CegarLoopResult]: At program point stubMoreProcessingRequiredENTRY(lines 421 434) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (= ~s~0 ~NP~0) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (not (= ~setEventCalled~0 1)) (not (<= 1 ~compRegistered~0))) [2020-07-10 15:02:22,809 INFO L268 CegarLoopResult]: For program point stubMoreProcessingRequiredEXIT(lines 421 434) no Hoare annotation was computed. [2020-07-10 15:02:22,809 INFO L268 CegarLoopResult]: For program point ULTIMATE.initFINAL(line -1) no Hoare annotation was computed. [2020-07-10 15:02:22,810 INFO L264 CegarLoopResult]: At program point ULTIMATE.initENTRY(line -1) the Hoare annotation is: (and (= ~pended~0 |old(~pended~0)|) (= ~SKIP2~0 |old(~SKIP2~0)|) (= ~NP~0 |old(~NP~0)|) (= ~customIrp~0 |old(~customIrp~0)|) (= ~UNLOADED~0 |old(~UNLOADED~0)|) (= ~Executive~0 |old(~Executive~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~s~0 |old(~s~0)|) (= ~DC~0 |old(~DC~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~IPC~0 |old(~IPC~0)|) (= ~compRegistered~0 |old(~compRegistered~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= ~SKIP1~0 |old(~SKIP1~0)|) (= ~MPR3~0 |old(~MPR3~0)|)) [2020-07-10 15:02:22,810 INFO L268 CegarLoopResult]: For program point ULTIMATE.initEXIT(line -1) no Hoare annotation was computed. [2020-07-10 15:02:22,810 INFO L264 CegarLoopResult]: At program point L541(line 541) the Hoare annotation is: (let ((.cse0 (not (= 1 |old(~setEventCalled~0)|))) (.cse1 (not (<= 1 ~NP~0))) (.cse2 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse3 (not (<= (+ ~NP~0 4) ~MPR1~0))) (.cse4 (= 1 ~pended~0)) (.cse5 (not (<= (+ ~SKIP2~0 3) ~IPC~0))) (.cse6 (not (<= ~NP~0 1))) (.cse7 (not (<= 1 ~compRegistered~0)))) (and (or .cse0 (not (= ~MPR3~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~NP~0 |old(~s~0)|)) .cse5 .cse6 .cse7))) [2020-07-10 15:02:22,810 INFO L268 CegarLoopResult]: For program point L539(lines 539 543) no Hoare annotation was computed. [2020-07-10 15:02:22,810 INFO L268 CegarLoopResult]: For program point L539-1(lines 526 545) no Hoare annotation was computed. [2020-07-10 15:02:22,810 INFO L268 CegarLoopResult]: For program point KeWaitForSingleObjectEXIT(lines 521 562) no Hoare annotation was computed. [2020-07-10 15:02:22,810 INFO L268 CegarLoopResult]: For program point L527(lines 527 532) no Hoare annotation was computed. [2020-07-10 15:02:22,811 INFO L268 CegarLoopResult]: For program point L548(lines 548 560) no Hoare annotation was computed. [2020-07-10 15:02:22,811 INFO L268 CegarLoopResult]: For program point KeWaitForSingleObjectFINAL(lines 521 562) no Hoare annotation was computed. [2020-07-10 15:02:22,811 INFO L264 CegarLoopResult]: At program point L534(lines 526 545) the Hoare annotation is: (let ((.cse0 (not (= 1 |old(~setEventCalled~0)|))) (.cse1 (not (<= 1 ~NP~0))) (.cse2 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse3 (not (<= (+ ~NP~0 4) ~MPR1~0))) (.cse4 (= 1 ~pended~0)) (.cse5 (not (<= (+ ~SKIP2~0 3) ~IPC~0))) (.cse6 (not (<= ~NP~0 1))) (.cse7 (not (<= 1 ~compRegistered~0)))) (and (or .cse0 (not (= ~MPR3~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse1 (and (= ~s~0 ~NP~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~customIrp~0)| ~customIrp~0)) .cse2 .cse3 .cse4 (not (= ~NP~0 |old(~s~0)|)) .cse5 .cse6 .cse7))) [2020-07-10 15:02:22,811 INFO L268 CegarLoopResult]: For program point L526(lines 526 545) no Hoare annotation was computed. [2020-07-10 15:02:22,811 INFO L264 CegarLoopResult]: At program point L551(lines 550 560) the Hoare annotation is: (let ((.cse0 (not (= 1 |old(~setEventCalled~0)|))) (.cse1 (not (<= 1 ~NP~0))) (.cse2 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse3 (not (<= (+ ~NP~0 4) ~MPR1~0))) (.cse4 (= 1 ~pended~0)) (.cse5 (not (<= (+ ~SKIP2~0 3) ~IPC~0))) (.cse6 (not (<= ~NP~0 1))) (.cse7 (not (<= 1 ~compRegistered~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~NP~0 |old(~s~0)|)) (= ~s~0 |old(~s~0)|) .cse5 .cse6 .cse7) (or .cse0 (not (= ~MPR3~0 |old(~s~0)|)) .cse1 (= ~s~0 ~NP~0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7))) [2020-07-10 15:02:22,812 INFO L264 CegarLoopResult]: At program point KeWaitForSingleObjectENTRY(lines 521 562) the Hoare annotation is: (let ((.cse0 (not (= 1 |old(~setEventCalled~0)|))) (.cse1 (not (<= 1 ~NP~0))) (.cse4 (= ~setEventCalled~0 1)) (.cse5 (= |old(~customIrp~0)| ~customIrp~0)) (.cse2 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse3 (not (<= (+ ~NP~0 4) ~MPR1~0))) (.cse6 (= 1 ~pended~0)) (.cse7 (not (<= (+ ~SKIP2~0 3) ~IPC~0))) (.cse8 (not (<= ~NP~0 1))) (.cse9 (not (<= 1 ~compRegistered~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (and (= ~s~0 ~NP~0) .cse4 .cse5) .cse6 (not (= ~NP~0 |old(~s~0)|)) .cse7 .cse8 .cse9) (or .cse0 (not (= ~MPR3~0 |old(~s~0)|)) .cse1 (and (= ~MPR3~0 ~s~0) .cse4 .cse5) .cse2 .cse3 .cse6 .cse7 .cse8 .cse9))) [2020-07-10 15:02:22,812 INFO L264 CegarLoopResult]: At program point L549(lines 548 560) the Hoare annotation is: (let ((.cse0 (not (= 1 |old(~setEventCalled~0)|))) (.cse1 (not (<= 1 ~NP~0))) (.cse2 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse3 (not (<= (+ ~NP~0 4) ~MPR1~0))) (.cse4 (= 1 ~pended~0)) (.cse5 (not (<= (+ ~SKIP2~0 3) ~IPC~0))) (.cse6 (not (<= ~NP~0 1))) (.cse7 (not (<= 1 ~compRegistered~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~NP~0 |old(~s~0)|)) (= ~s~0 |old(~s~0)|) .cse5 .cse6 .cse7) (or .cse0 (not (= ~MPR3~0 |old(~s~0)|)) .cse1 (= ~s~0 ~NP~0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7))) [2020-07-10 15:02:22,812 INFO L264 CegarLoopResult]: At program point L507(line 507) the Hoare annotation is: (or (not (<= (+ ~NP~0 2) ~SKIP1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= 1 ~compRegistered~0))) [2020-07-10 15:02:22,812 INFO L268 CegarLoopResult]: For program point L507-1(lines 499 512) no Hoare annotation was computed. [2020-07-10 15:02:22,812 INFO L264 CegarLoopResult]: At program point IofCompleteRequestENTRY(lines 499 512) the Hoare annotation is: (or (not (<= (+ ~NP~0 2) ~SKIP1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (= ~s~0 |old(~s~0)|) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= 1 ~compRegistered~0))) [2020-07-10 15:02:22,812 INFO L268 CegarLoopResult]: For program point L503(lines 503 509) no Hoare annotation was computed. [2020-07-10 15:02:22,812 INFO L268 CegarLoopResult]: For program point IofCompleteRequestEXIT(lines 499 512) no Hoare annotation was computed. [2020-07-10 15:02:22,813 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-10 15:02:22,813 INFO L264 CegarLoopResult]: At program point L-1(line -1) the Hoare annotation is: (and (= ~MPR1~0 ~s~0) (not (= 1 ~pended~0)) (<= ~IPC~0 ~s~0) (= ~MPR1~0 ~NP~0) (= ~MPR3~0 ~s~0) (= 0 ~compRegistered~0) (= ~SKIP1~0 ~s~0)) [2020-07-10 15:02:22,813 INFO L271 CegarLoopResult]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2020-07-10 15:02:22,813 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-10 15:02:22,813 INFO L264 CegarLoopResult]: At program point L192(lines 192 194) the Hoare annotation is: (let ((.cse12 (<= ~NP~0 1)) (.cse9 (<= 259 KbFilter_PnP_~status~0)) (.cse3 (= 1 ~pended~0)) (.cse10 (= ~setEventCalled~0 1)) (.cse13 (<= (+ ~SKIP2~0 3) ~IPC~0)) (.cse14 (= ~NP~0 |old(~s~0)|)) (.cse11 (<= 1 ~compRegistered~0)) (.cse16 (<= (+ ~NP~0 4) ~MPR1~0)) (.cse15 (<= 1 ~NP~0))) (let ((.cse0 (not .cse15)) (.cse1 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse2 (not .cse16)) (.cse4 (and .cse15 .cse12 .cse9 (not .cse3) (= ~s~0 |old(~s~0)|) .cse10 .cse16 .cse13 .cse14 .cse11 (<= (+ ~s~0 2) ~SKIP1~0))) (.cse5 (not .cse14)) (.cse6 (not .cse13)) (.cse8 (not .cse12)) (.cse7 (not (= 0 |old(~compRegistered~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= (+ |old(~myStatus~0)| 1073741637) 0)) .cse8 (<= (+ ~myStatus~0 1073741637) 0)) (or .cse0 .cse1 .cse2 (and (<= KbFilter_PnP_~__cil_tmp23~0 259) .cse9 (= ~MPR3~0 ~s~0) (<= 259 KbFilter_PnP_~__cil_tmp23~0) .cse10 .cse11) .cse3 .cse4 .cse5 .cse6 .cse8 .cse7)))) [2020-07-10 15:02:22,813 INFO L268 CegarLoopResult]: For program point L192-1(lines 192 194) no Hoare annotation was computed. [2020-07-10 15:02:22,814 INFO L268 CegarLoopResult]: For program point L151(lines 151 265) no Hoare annotation was computed. [2020-07-10 15:02:22,814 INFO L268 CegarLoopResult]: For program point L118(lines 118 276) no Hoare annotation was computed. [2020-07-10 15:02:22,814 INFO L264 CegarLoopResult]: At program point L209(line 209) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (not (= 0 |old(~compRegistered~0)|)) (and (= ~s~0 ~NP~0) (<= 1 ~compRegistered~0))) [2020-07-10 15:02:22,814 INFO L264 CegarLoopResult]: At program point L176(line 176) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (not (= 0 |old(~compRegistered~0)|))) [2020-07-10 15:02:22,814 INFO L264 CegarLoopResult]: At program point L234(line 234) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (not (= 0 |old(~compRegistered~0)|))) [2020-07-10 15:02:22,814 INFO L268 CegarLoopResult]: For program point L234-1(lines 230 236) no Hoare annotation was computed. [2020-07-10 15:02:22,815 INFO L268 CegarLoopResult]: For program point L160(lines 160 262) no Hoare annotation was computed. [2020-07-10 15:02:22,815 INFO L268 CegarLoopResult]: For program point L127(lines 127 273) no Hoare annotation was computed. [2020-07-10 15:02:22,815 INFO L264 CegarLoopResult]: At program point L218(line 218) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (not (= 0 |old(~compRegistered~0)|))) [2020-07-10 15:02:22,815 INFO L264 CegarLoopResult]: At program point L185(lines 185 186) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~NP~0))) (.cse1 (not (<= (+ ~NP~0 2) ~SKIP1~0))) (.cse2 (not (<= (+ ~NP~0 4) ~MPR1~0))) (.cse3 (= 1 ~pended~0)) (.cse4 (not (= ~NP~0 |old(~s~0)|))) (.cse5 (not (<= (+ ~SKIP2~0 3) ~IPC~0))) (.cse6 (not (<= ~NP~0 1))) (.cse7 (not (= 0 |old(~compRegistered~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= (+ |old(~myStatus~0)| 1073741637) 0)) (<= (+ ~myStatus~0 1073741637) 0)) (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|) (= |old(~customIrp~0)| ~customIrp~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (<= 1 ~compRegistered~0)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7))) [2020-07-10 15:02:22,815 INFO L268 CegarLoopResult]: For program point L218-1(lines 214 220) no Hoare annotation was computed. [2020-07-10 15:02:22,815 INFO L268 CegarLoopResult]: For program point L185-1(lines 185 186) no Hoare annotation was computed. [2020-07-10 15:02:22,815 INFO L268 CegarLoopResult]: For program point L169(lines 169 181) no Hoare annotation was computed. [2020-07-10 15:02:22,815 INFO L268 CegarLoopResult]: For program point L136(lines 136 270) no Hoare annotation was computed. [2020-07-10 15:02:22,815 INFO L268 CegarLoopResult]: For program point L103(lines 103 281) no Hoare annotation was computed. [2020-07-10 15:02:22,815 INFO L271 CegarLoopResult]: At program point L260(lines 164 261) the Hoare annotation is: true [2020-07-10 15:02:22,816 INFO L268 CegarLoopResult]: For program point KbFilter_PnPEXIT(lines 73 285) no Hoare annotation was computed. [2020-07-10 15:02:22,816 INFO L268 CegarLoopResult]: For program point L145(lines 145 267) no Hoare annotation was computed. [2020-07-10 15:02:22,816 INFO L268 CegarLoopResult]: For program point L112(lines 112 278) no Hoare annotation was computed. [2020-07-10 15:02:22,816 INFO L264 CegarLoopResult]: At program point L104(lines 103 281) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~s~0 ~NP~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |old(~customIrp~0)| ~customIrp~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|)) (not (<= ~NP~0 1)) (not (= 0 |old(~compRegistered~0)|))) [2020-07-10 15:02:22,816 INFO L268 CegarLoopResult]: For program point L154(lines 154 264) no Hoare annotation was computed. [2020-07-10 15:02:22,816 INFO L268 CegarLoopResult]: For program point L121(lines 121 275) no Hoare annotation was computed. [2020-07-10 15:02:22,816 INFO L264 CegarLoopResult]: At program point KbFilter_PnPENTRY(lines 73 285) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~s~0 ~NP~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |old(~customIrp~0)| ~customIrp~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|)) (not (<= ~NP~0 1)) (not (= 0 |old(~compRegistered~0)|))) [2020-07-10 15:02:22,816 INFO L264 CegarLoopResult]: At program point L171(line 171) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (not (= 0 |old(~compRegistered~0)|))) [2020-07-10 15:02:22,817 INFO L268 CegarLoopResult]: For program point KbFilter_PnPFINAL(lines 73 285) no Hoare annotation was computed. [2020-07-10 15:02:22,817 INFO L264 CegarLoopResult]: At program point L163(lines 109 279) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~s~0 ~NP~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |old(~customIrp~0)| ~customIrp~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|)) (not (<= ~NP~0 1)) (not (= 0 |old(~compRegistered~0)|))) [2020-07-10 15:02:22,817 INFO L268 CegarLoopResult]: For program point L130(lines 130 272) no Hoare annotation was computed. [2020-07-10 15:02:22,817 INFO L268 CegarLoopResult]: For program point L139(lines 139 269) no Hoare annotation was computed. [2020-07-10 15:02:22,817 INFO L268 CegarLoopResult]: For program point L106(lines 106 280) no Hoare annotation was computed. [2020-07-10 15:02:22,817 INFO L268 CegarLoopResult]: For program point L230(lines 230 236) no Hoare annotation was computed. [2020-07-10 15:02:22,817 INFO L264 CegarLoopResult]: At program point L255(lines 255 256) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (not (= 0 |old(~compRegistered~0)|)) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= 0 ~compRegistered~0) (= ~SKIP1~0 ~s~0))) [2020-07-10 15:02:22,817 INFO L268 CegarLoopResult]: For program point L255-1(lines 255 256) no Hoare annotation was computed. [2020-07-10 15:02:22,817 INFO L268 CegarLoopResult]: For program point L214(lines 214 220) no Hoare annotation was computed. [2020-07-10 15:02:22,818 INFO L268 CegarLoopResult]: For program point L148(lines 148 266) no Hoare annotation was computed. [2020-07-10 15:02:22,818 INFO L268 CegarLoopResult]: For program point L115(lines 115 277) no Hoare annotation was computed. [2020-07-10 15:02:22,818 INFO L264 CegarLoopResult]: At program point L107(lines 106 280) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~s~0 ~NP~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |old(~customIrp~0)| ~customIrp~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|)) (not (<= ~NP~0 1)) (not (= 0 |old(~compRegistered~0)|))) [2020-07-10 15:02:22,818 INFO L268 CegarLoopResult]: For program point L198(lines 198 204) no Hoare annotation was computed. [2020-07-10 15:02:22,818 INFO L268 CegarLoopResult]: For program point L190(lines 190 196) no Hoare annotation was computed. [2020-07-10 15:02:22,818 INFO L268 CegarLoopResult]: For program point L157(lines 157 263) no Hoare annotation was computed. [2020-07-10 15:02:22,818 INFO L268 CegarLoopResult]: For program point L124(lines 124 274) no Hoare annotation was computed. [2020-07-10 15:02:22,818 INFO L268 CegarLoopResult]: For program point L190-2(lines 164 259) no Hoare annotation was computed. [2020-07-10 15:02:22,819 INFO L264 CegarLoopResult]: At program point L240(line 240) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (not (= 0 |old(~compRegistered~0)|)) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= 0 ~compRegistered~0) (= ~SKIP1~0 ~s~0))) [2020-07-10 15:02:22,819 INFO L268 CegarLoopResult]: For program point L240-1(line 240) no Hoare annotation was computed. [2020-07-10 15:02:22,819 INFO L268 CegarLoopResult]: For program point L174(lines 174 180) no Hoare annotation was computed. [2020-07-10 15:02:22,819 INFO L268 CegarLoopResult]: For program point L174-1(lines 169 181) no Hoare annotation was computed. [2020-07-10 15:02:22,819 INFO L268 CegarLoopResult]: For program point L199(lines 199 203) no Hoare annotation was computed. [2020-07-10 15:02:22,819 INFO L268 CegarLoopResult]: For program point L133(lines 133 271) no Hoare annotation was computed. [2020-07-10 15:02:22,819 INFO L268 CegarLoopResult]: For program point L100(lines 100 282) no Hoare annotation was computed. [2020-07-10 15:02:22,819 INFO L264 CegarLoopResult]: At program point L224(lines 224 225) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (not (= 0 |old(~compRegistered~0)|)) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= 0 ~compRegistered~0) (= ~SKIP1~0 ~s~0))) [2020-07-10 15:02:22,820 INFO L268 CegarLoopResult]: For program point L224-1(lines 224 225) no Hoare annotation was computed. [2020-07-10 15:02:22,820 INFO L264 CegarLoopResult]: At program point L249(line 249) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (not (<= ~NP~0 1)) (not (= 0 |old(~compRegistered~0)|))) [2020-07-10 15:02:22,820 INFO L268 CegarLoopResult]: For program point L249-1(lines 245 251) no Hoare annotation was computed. [2020-07-10 15:02:22,820 INFO L268 CegarLoopResult]: For program point L142(lines 142 268) no Hoare annotation was computed. [2020-07-10 15:02:22,820 INFO L268 CegarLoopResult]: For program point L109(lines 109 279) no Hoare annotation was computed. [2020-07-10 15:02:22,820 INFO L264 CegarLoopResult]: At program point L101(lines 100 282) the Hoare annotation is: (or (not (<= 1 ~NP~0)) (not (<= (+ ~NP~0 2) ~SKIP1~0)) (not (<= (+ ~NP~0 4) ~MPR1~0)) (= 1 ~pended~0) (not (= ~NP~0 |old(~s~0)|)) (not (<= (+ ~SKIP2~0 3) ~IPC~0)) (and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~s~0 ~NP~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |old(~customIrp~0)| ~customIrp~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|)) (not (<= ~NP~0 1)) (not (= 0 |old(~compRegistered~0)|))) [2020-07-10 15:02:22,824 WARN L170 areAnnotationChecker]: KeSetEventFINAL has no Hoare annotation [2020-07-10 15:02:22,825 WARN L170 areAnnotationChecker]: stub_driver_initFINAL has no Hoare annotation [2020-07-10 15:02:22,825 WARN L170 areAnnotationChecker]: _BLAST_initFINAL has no Hoare annotation [2020-07-10 15:02:22,825 WARN L170 areAnnotationChecker]: errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION has no Hoare annotation [2020-07-10 15:02:22,825 WARN L170 areAnnotationChecker]: errorFnFINAL has no Hoare annotation [2020-07-10 15:02:22,826 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2020-07-10 15:02:22,826 WARN L170 areAnnotationChecker]: L429-1 has no Hoare annotation [2020-07-10 15:02:22,827 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2020-07-10 15:02:22,827 WARN L170 areAnnotationChecker]: L526 has no Hoare annotation [2020-07-10 15:02:22,827 WARN L170 areAnnotationChecker]: L503 has no Hoare annotation [2020-07-10 15:02:22,829 WARN L170 areAnnotationChecker]: L100 has no Hoare annotation [2020-07-10 15:02:22,829 WARN L170 areAnnotationChecker]: KeSetEventFINAL has no Hoare annotation [2020-07-10 15:02:22,829 WARN L170 areAnnotationChecker]: L569-1 has no Hoare annotation [2020-07-10 15:02:22,831 WARN L170 areAnnotationChecker]: stub_driver_initFINAL has no Hoare annotation [2020-07-10 15:02:22,831 WARN L170 areAnnotationChecker]: _BLAST_initFINAL has no Hoare annotation [2020-07-10 15:02:22,831 WARN L170 areAnnotationChecker]: errorFnFINAL has no Hoare annotation [2020-07-10 15:02:22,831 WARN L170 areAnnotationChecker]: L319-1 has no Hoare annotation [2020-07-10 15:02:22,833 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2020-07-10 15:02:22,833 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2020-07-10 15:02:22,833 WARN L170 areAnnotationChecker]: L429-1 has no Hoare annotation [2020-07-10 15:02:22,833 WARN L170 areAnnotationChecker]: L429-1 has no Hoare annotation [2020-07-10 15:02:22,833 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2020-07-10 15:02:22,833 WARN L170 areAnnotationChecker]: L526 has no Hoare annotation [2020-07-10 15:02:22,833 WARN L170 areAnnotationChecker]: L526 has no Hoare annotation [2020-07-10 15:02:22,833 WARN L170 areAnnotationChecker]: L503 has no Hoare annotation [2020-07-10 15:02:22,833 WARN L170 areAnnotationChecker]: L503 has no Hoare annotation [2020-07-10 15:02:22,833 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-10 15:02:22,835 WARN L170 areAnnotationChecker]: L100 has no Hoare annotation [2020-07-10 15:02:22,835 WARN L170 areAnnotationChecker]: L100 has no Hoare annotation [2020-07-10 15:02:22,835 WARN L170 areAnnotationChecker]: KeSetEventEXIT has no Hoare annotation [2020-07-10 15:02:22,835 WARN L170 areAnnotationChecker]: L569-1 has no Hoare annotation [2020-07-10 15:02:22,836 WARN L170 areAnnotationChecker]: stub_driver_initEXIT has no Hoare annotation [2020-07-10 15:02:22,836 WARN L170 areAnnotationChecker]: _BLAST_initEXIT has no Hoare annotation [2020-07-10 15:02:22,836 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2020-07-10 15:02:22,836 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2020-07-10 15:02:22,836 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2020-07-10 15:02:22,836 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2020-07-10 15:02:22,836 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2020-07-10 15:02:22,836 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2020-07-10 15:02:22,836 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2020-07-10 15:02:22,836 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2020-07-10 15:02:22,837 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2020-07-10 15:02:22,837 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2020-07-10 15:02:22,837 WARN L170 areAnnotationChecker]: L319-1 has no Hoare annotation [2020-07-10 15:02:22,837 WARN L170 areAnnotationChecker]: L319-1 has no Hoare annotation [2020-07-10 15:02:22,837 WARN L170 areAnnotationChecker]: L444-1 has no Hoare annotation [2020-07-10 15:02:22,838 WARN L170 areAnnotationChecker]: L443-1 has no Hoare annotation [2020-07-10 15:02:22,838 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2020-07-10 15:02:22,839 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2020-07-10 15:02:22,839 WARN L170 areAnnotationChecker]: L527 has no Hoare annotation [2020-07-10 15:02:22,839 WARN L170 areAnnotationChecker]: L527 has no Hoare annotation [2020-07-10 15:02:22,839 WARN L170 areAnnotationChecker]: L539-1 has no Hoare annotation [2020-07-10 15:02:22,839 WARN L170 areAnnotationChecker]: L539 has no Hoare annotation [2020-07-10 15:02:22,839 WARN L170 areAnnotationChecker]: L507-1 has no Hoare annotation [2020-07-10 15:02:22,839 WARN L170 areAnnotationChecker]: L507-1 has no Hoare annotation [2020-07-10 15:02:22,839 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-10 15:02:22,839 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2020-07-10 15:02:22,839 WARN L170 areAnnotationChecker]: L103 has no Hoare annotation [2020-07-10 15:02:22,840 WARN L170 areAnnotationChecker]: L103 has no Hoare annotation [2020-07-10 15:02:22,840 WARN L170 areAnnotationChecker]: KbFilter_CompleteFINAL has no Hoare annotation [2020-07-10 15:02:22,840 WARN L170 areAnnotationChecker]: L335 has no Hoare annotation [2020-07-10 15:02:22,840 WARN L170 areAnnotationChecker]: L335 has no Hoare annotation [2020-07-10 15:02:22,840 WARN L170 areAnnotationChecker]: L383 has no Hoare annotation [2020-07-10 15:02:22,840 WARN L170 areAnnotationChecker]: L491-1 has no Hoare annotation [2020-07-10 15:02:22,840 WARN L170 areAnnotationChecker]: L539-1 has no Hoare annotation [2020-07-10 15:02:22,840 WARN L170 areAnnotationChecker]: L174-1 has no Hoare annotation [2020-07-10 15:02:22,841 WARN L170 areAnnotationChecker]: L218-1 has no Hoare annotation [2020-07-10 15:02:22,841 WARN L170 areAnnotationChecker]: L234-1 has no Hoare annotation [2020-07-10 15:02:22,841 WARN L170 areAnnotationChecker]: L249-1 has no Hoare annotation [2020-07-10 15:02:22,841 WARN L170 areAnnotationChecker]: L330 has no Hoare annotation [2020-07-10 15:02:22,841 WARN L170 areAnnotationChecker]: L330 has no Hoare annotation [2020-07-10 15:02:22,841 WARN L170 areAnnotationChecker]: L368 has no Hoare annotation [2020-07-10 15:02:22,842 WARN L170 areAnnotationChecker]: L444-1 has no Hoare annotation [2020-07-10 15:02:22,842 WARN L170 areAnnotationChecker]: L449 has no Hoare annotation [2020-07-10 15:02:22,842 WARN L170 areAnnotationChecker]: L449 has no Hoare annotation [2020-07-10 15:02:22,842 WARN L170 areAnnotationChecker]: L539 has no Hoare annotation [2020-07-10 15:02:22,842 WARN L170 areAnnotationChecker]: L539 has no Hoare annotation [2020-07-10 15:02:22,842 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2020-07-10 15:02:22,842 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2020-07-10 15:02:22,842 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2020-07-10 15:02:22,842 WARN L170 areAnnotationChecker]: L214 has no Hoare annotation [2020-07-10 15:02:22,842 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2020-07-10 15:02:22,843 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2020-07-10 15:02:22,843 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2020-07-10 15:02:22,843 WARN L170 areAnnotationChecker]: L338-1 has no Hoare annotation [2020-07-10 15:02:22,843 WARN L170 areAnnotationChecker]: L338-1 has no Hoare annotation [2020-07-10 15:02:22,843 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2020-07-10 15:02:22,843 WARN L170 areAnnotationChecker]: IofCallDriverFINAL has no Hoare annotation [2020-07-10 15:02:22,843 WARN L170 areAnnotationChecker]: L548 has no Hoare annotation [2020-07-10 15:02:22,843 WARN L170 areAnnotationChecker]: L548 has no Hoare annotation [2020-07-10 15:02:22,843 WARN L170 areAnnotationChecker]: L185-1 has no Hoare annotation [2020-07-10 15:02:22,845 WARN L170 areAnnotationChecker]: L224-1 has no Hoare annotation [2020-07-10 15:02:22,847 WARN L170 areAnnotationChecker]: L240-1 has no Hoare annotation [2020-07-10 15:02:22,848 WARN L170 areAnnotationChecker]: L255-1 has no Hoare annotation [2020-07-10 15:02:22,850 WARN L170 areAnnotationChecker]: L335 has no Hoare annotation [2020-07-10 15:02:22,851 WARN L170 areAnnotationChecker]: L368 has no Hoare annotation [2020-07-10 15:02:22,851 WARN L170 areAnnotationChecker]: L368 has no Hoare annotation [2020-07-10 15:02:22,852 WARN L170 areAnnotationChecker]: L376 has no Hoare annotation [2020-07-10 15:02:22,852 WARN L170 areAnnotationChecker]: L443-1 has no Hoare annotation [2020-07-10 15:02:22,858 WARN L170 areAnnotationChecker]: L454 has no Hoare annotation [2020-07-10 15:02:22,858 WARN L170 areAnnotationChecker]: L454 has no Hoare annotation [2020-07-10 15:02:22,859 WARN L170 areAnnotationChecker]: L539-1 has no Hoare annotation [2020-07-10 15:02:22,859 WARN L170 areAnnotationChecker]: KbFilter_PnPFINAL has no Hoare annotation [2020-07-10 15:02:22,859 WARN L170 areAnnotationChecker]: L174-1 has no Hoare annotation [2020-07-10 15:02:22,859 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2020-07-10 15:02:22,859 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2020-07-10 15:02:22,859 WARN L170 areAnnotationChecker]: L214 has no Hoare annotation [2020-07-10 15:02:22,859 WARN L170 areAnnotationChecker]: L214 has no Hoare annotation [2020-07-10 15:02:22,859 WARN L170 areAnnotationChecker]: L230 has no Hoare annotation [2020-07-10 15:02:22,859 WARN L170 areAnnotationChecker]: L109 has no Hoare annotation [2020-07-10 15:02:22,860 WARN L170 areAnnotationChecker]: L109 has no Hoare annotation [2020-07-10 15:02:22,860 WARN L170 areAnnotationChecker]: L350 has no Hoare annotation [2020-07-10 15:02:22,860 WARN L170 areAnnotationChecker]: L350 has no Hoare annotation [2020-07-10 15:02:22,860 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2020-07-10 15:02:22,860 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2020-07-10 15:02:22,860 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2020-07-10 15:02:22,860 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2020-07-10 15:02:22,860 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2020-07-10 15:02:22,860 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectFINAL has no Hoare annotation [2020-07-10 15:02:22,861 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectFINAL has no Hoare annotation [2020-07-10 15:02:22,861 WARN L170 areAnnotationChecker]: L185-1 has no Hoare annotation [2020-07-10 15:02:22,861 WARN L170 areAnnotationChecker]: L224-1 has no Hoare annotation [2020-07-10 15:02:22,861 WARN L170 areAnnotationChecker]: L240-1 has no Hoare annotation [2020-07-10 15:02:22,861 WARN L170 areAnnotationChecker]: L255-1 has no Hoare annotation [2020-07-10 15:02:22,861 WARN L170 areAnnotationChecker]: L376 has no Hoare annotation [2020-07-10 15:02:22,861 WARN L170 areAnnotationChecker]: L376 has no Hoare annotation [2020-07-10 15:02:22,861 WARN L170 areAnnotationChecker]: L384 has no Hoare annotation [2020-07-10 15:02:22,861 WARN L170 areAnnotationChecker]: L383 has no Hoare annotation [2020-07-10 15:02:22,862 WARN L170 areAnnotationChecker]: L491-1 has no Hoare annotation [2020-07-10 15:02:22,862 WARN L170 areAnnotationChecker]: L477 has no Hoare annotation [2020-07-10 15:02:22,867 WARN L170 areAnnotationChecker]: KbFilter_PnPFINAL has no Hoare annotation [2020-07-10 15:02:22,867 WARN L170 areAnnotationChecker]: L174-1 has no Hoare annotation [2020-07-10 15:02:22,868 WARN L170 areAnnotationChecker]: L218-1 has no Hoare annotation [2020-07-10 15:02:22,868 WARN L170 areAnnotationChecker]: L230 has no Hoare annotation [2020-07-10 15:02:22,868 WARN L170 areAnnotationChecker]: L230 has no Hoare annotation [2020-07-10 15:02:22,868 WARN L170 areAnnotationChecker]: L249-1 has no Hoare annotation [2020-07-10 15:02:22,869 WARN L170 areAnnotationChecker]: L112 has no Hoare annotation [2020-07-10 15:02:22,869 WARN L170 areAnnotationChecker]: L112 has no Hoare annotation [2020-07-10 15:02:22,869 WARN L170 areAnnotationChecker]: L357 has no Hoare annotation [2020-07-10 15:02:22,874 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2020-07-10 15:02:22,874 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectFINAL has no Hoare annotation [2020-07-10 15:02:22,874 WARN L170 areAnnotationChecker]: L190 has no Hoare annotation [2020-07-10 15:02:22,874 WARN L170 areAnnotationChecker]: L190 has no Hoare annotation [2020-07-10 15:02:22,874 WARN L170 areAnnotationChecker]: L384 has no Hoare annotation [2020-07-10 15:02:22,875 WARN L170 areAnnotationChecker]: L384 has no Hoare annotation [2020-07-10 15:02:22,875 WARN L170 areAnnotationChecker]: L477 has no Hoare annotation [2020-07-10 15:02:22,875 WARN L170 areAnnotationChecker]: L477 has no Hoare annotation [2020-07-10 15:02:22,875 WARN L170 areAnnotationChecker]: KbFilter_PnPEXIT has no Hoare annotation [2020-07-10 15:02:22,875 WARN L170 areAnnotationChecker]: L234-1 has no Hoare annotation [2020-07-10 15:02:22,875 WARN L170 areAnnotationChecker]: L249-1 has no Hoare annotation [2020-07-10 15:02:22,875 WARN L170 areAnnotationChecker]: L115 has no Hoare annotation [2020-07-10 15:02:22,875 WARN L170 areAnnotationChecker]: L115 has no Hoare annotation [2020-07-10 15:02:22,875 WARN L170 areAnnotationChecker]: L357 has no Hoare annotation [2020-07-10 15:02:22,875 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectEXIT has no Hoare annotation [2020-07-10 15:02:22,876 WARN L170 areAnnotationChecker]: L192-1 has no Hoare annotation [2020-07-10 15:02:22,879 WARN L170 areAnnotationChecker]: L190-2 has no Hoare annotation [2020-07-10 15:02:22,879 WARN L170 areAnnotationChecker]: L190-2 has no Hoare annotation [2020-07-10 15:02:22,879 WARN L170 areAnnotationChecker]: L385 has no Hoare annotation [2020-07-10 15:02:22,879 WARN L170 areAnnotationChecker]: L385 has no Hoare annotation [2020-07-10 15:02:22,879 WARN L170 areAnnotationChecker]: L478 has no Hoare annotation [2020-07-10 15:02:22,879 WARN L170 areAnnotationChecker]: L478 has no Hoare annotation [2020-07-10 15:02:22,880 WARN L170 areAnnotationChecker]: L486 has no Hoare annotation [2020-07-10 15:02:22,880 WARN L170 areAnnotationChecker]: L486 has no Hoare annotation [2020-07-10 15:02:22,880 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2020-07-10 15:02:22,880 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2020-07-10 15:02:22,880 WARN L170 areAnnotationChecker]: L192-1 has no Hoare annotation [2020-07-10 15:02:22,880 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2020-07-10 15:02:22,880 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2020-07-10 15:02:22,880 WARN L170 areAnnotationChecker]: L198 has no Hoare annotation [2020-07-10 15:02:22,881 WARN L170 areAnnotationChecker]: L386 has no Hoare annotation [2020-07-10 15:02:22,881 WARN L170 areAnnotationChecker]: L386 has no Hoare annotation [2020-07-10 15:02:22,881 WARN L170 areAnnotationChecker]: L396 has no Hoare annotation [2020-07-10 15:02:22,881 WARN L170 areAnnotationChecker]: L402 has no Hoare annotation [2020-07-10 15:02:22,881 WARN L170 areAnnotationChecker]: L491-1 has no Hoare annotation [2020-07-10 15:02:22,881 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2020-07-10 15:02:22,881 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2020-07-10 15:02:22,883 WARN L170 areAnnotationChecker]: L387 has no Hoare annotation [2020-07-10 15:02:22,883 WARN L170 areAnnotationChecker]: L387 has no Hoare annotation [2020-07-10 15:02:22,883 WARN L170 areAnnotationChecker]: L396 has no Hoare annotation [2020-07-10 15:02:22,883 WARN L170 areAnnotationChecker]: L396 has no Hoare annotation [2020-07-10 15:02:22,883 WARN L170 areAnnotationChecker]: L402 has no Hoare annotation [2020-07-10 15:02:22,883 WARN L170 areAnnotationChecker]: L402 has no Hoare annotation [2020-07-10 15:02:22,883 WARN L170 areAnnotationChecker]: L124 has no Hoare annotation [2020-07-10 15:02:22,883 WARN L170 areAnnotationChecker]: L124 has no Hoare annotation [2020-07-10 15:02:22,883 WARN L170 areAnnotationChecker]: L383 has no Hoare annotation [2020-07-10 15:02:22,884 WARN L170 areAnnotationChecker]: L403 has no Hoare annotation [2020-07-10 15:02:22,884 WARN L170 areAnnotationChecker]: L403 has no Hoare annotation [2020-07-10 15:02:22,884 WARN L170 areAnnotationChecker]: L407 has no Hoare annotation [2020-07-10 15:02:22,884 WARN L170 areAnnotationChecker]: L407 has no Hoare annotation [2020-07-10 15:02:22,884 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2020-07-10 15:02:22,884 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2020-07-10 15:02:22,884 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-10 15:02:22,884 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-10 15:02:22,884 WARN L170 areAnnotationChecker]: L133 has no Hoare annotation [2020-07-10 15:02:22,884 WARN L170 areAnnotationChecker]: L133 has no Hoare annotation [2020-07-10 15:02:22,885 WARN L170 areAnnotationChecker]: L136 has no Hoare annotation [2020-07-10 15:02:22,885 WARN L170 areAnnotationChecker]: L136 has no Hoare annotation [2020-07-10 15:02:22,885 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2020-07-10 15:02:22,885 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2020-07-10 15:02:22,885 WARN L170 areAnnotationChecker]: L142 has no Hoare annotation [2020-07-10 15:02:22,885 WARN L170 areAnnotationChecker]: L142 has no Hoare annotation [2020-07-10 15:02:22,885 WARN L170 areAnnotationChecker]: L145 has no Hoare annotation [2020-07-10 15:02:22,885 WARN L170 areAnnotationChecker]: L145 has no Hoare annotation [2020-07-10 15:02:22,885 WARN L170 areAnnotationChecker]: L148 has no Hoare annotation [2020-07-10 15:02:22,885 WARN L170 areAnnotationChecker]: L148 has no Hoare annotation [2020-07-10 15:02:22,886 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2020-07-10 15:02:22,886 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2020-07-10 15:02:22,886 WARN L170 areAnnotationChecker]: L154 has no Hoare annotation [2020-07-10 15:02:22,886 WARN L170 areAnnotationChecker]: L154 has no Hoare annotation [2020-07-10 15:02:22,886 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2020-07-10 15:02:22,886 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2020-07-10 15:02:22,886 WARN L170 areAnnotationChecker]: L160 has no Hoare annotation [2020-07-10 15:02:22,886 WARN L170 areAnnotationChecker]: L160 has no Hoare annotation [2020-07-10 15:02:22,886 INFO L163 areAnnotationChecker]: CFG has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-10 15:02:22,961 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.07 03:02:22 BoogieIcfgContainer [2020-07-10 15:02:22,961 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-10 15:02:22,967 INFO L168 Benchmark]: Toolchain (without parser) took 64894.97 ms. Allocated memory was 147.3 MB in the beginning and 604.0 MB in the end (delta: 456.7 MB). Free memory was 104.4 MB in the beginning and 316.1 MB in the end (delta: -211.7 MB). Peak memory consumption was 244.9 MB. Max. memory is 7.1 GB. [2020-07-10 15:02:22,967 INFO L168 Benchmark]: CDTParser took 0.21 ms. Allocated memory is still 147.3 MB. Free memory is still 123.2 MB. There was no memory consumed. Max. memory is 7.1 GB. [2020-07-10 15:02:22,967 INFO L168 Benchmark]: CACSL2BoogieTranslator took 588.19 ms. Allocated memory was 147.3 MB in the beginning and 204.5 MB in the end (delta: 57.1 MB). Free memory was 104.0 MB in the beginning and 179.1 MB in the end (delta: -75.2 MB). Peak memory consumption was 22.3 MB. Max. memory is 7.1 GB. [2020-07-10 15:02:22,968 INFO L168 Benchmark]: Boogie Preprocessor took 64.23 ms. Allocated memory is still 204.5 MB. Free memory was 179.1 MB in the beginning and 176.0 MB in the end (delta: 3.1 MB). Peak memory consumption was 3.1 MB. Max. memory is 7.1 GB. [2020-07-10 15:02:22,970 INFO L168 Benchmark]: RCFGBuilder took 1022.64 ms. Allocated memory was 204.5 MB in the beginning and 232.8 MB in the end (delta: 28.3 MB). Free memory was 176.0 MB in the beginning and 206.1 MB in the end (delta: -30.0 MB). Peak memory consumption was 84.7 MB. Max. memory is 7.1 GB. [2020-07-10 15:02:22,971 INFO L168 Benchmark]: TraceAbstraction took 63211.22 ms. Allocated memory was 232.8 MB in the beginning and 604.0 MB in the end (delta: 371.2 MB). Free memory was 204.5 MB in the beginning and 316.1 MB in the end (delta: -111.7 MB). Peak memory consumption was 259.5 MB. Max. memory is 7.1 GB. [2020-07-10 15:02:22,972 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21 ms. Allocated memory is still 147.3 MB. Free memory is still 123.2 MB. There was no memory consumed. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 588.19 ms. Allocated memory was 147.3 MB in the beginning and 204.5 MB in the end (delta: 57.1 MB). Free memory was 104.0 MB in the beginning and 179.1 MB in the end (delta: -75.2 MB). Peak memory consumption was 22.3 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 64.23 ms. Allocated memory is still 204.5 MB. Free memory was 179.1 MB in the beginning and 176.0 MB in the end (delta: 3.1 MB). Peak memory consumption was 3.1 MB. Max. memory is 7.1 GB. * RCFGBuilder took 1022.64 ms. Allocated memory was 204.5 MB in the beginning and 232.8 MB in the end (delta: 28.3 MB). Free memory was 176.0 MB in the beginning and 206.1 MB in the end (delta: -30.0 MB). Peak memory consumption was 84.7 MB. Max. memory is 7.1 GB. * TraceAbstraction took 63211.22 ms. Allocated memory was 232.8 MB in the beginning and 604.0 MB in the end (delta: 371.2 MB). Free memory was 204.5 MB in the beginning and 316.1 MB in the end (delta: -111.7 MB). Peak memory consumption was 259.5 MB. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 579]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 367]: Loop Invariant Derived loop invariant: ((((((((!(1 == pended) && SKIP2 + 3 <= IPC) && NP + 2 <= SKIP1) || !(\old(NP) == \old(MPR1))) || !(\old(SKIP1) == \old(s))) || 1 == \old(pended)) || !(0 == \old(compRegistered))) || !(\old(s) == \old(MPR1))) || !(\old(s) == \old(MPR3))) || !(\old(IPC) <= \old(s)) - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: ((((((((!(1 == pended) && SKIP2 + 3 <= IPC) && NP + 2 <= SKIP1) || !(\old(NP) == \old(MPR1))) || !(\old(SKIP1) == \old(s))) || 1 == \old(pended)) || !(0 == \old(compRegistered))) || !(\old(s) == \old(MPR1))) || !(\old(s) == \old(MPR3))) || !(\old(IPC) <= \old(s)) - InvariantResult [Line: 352]: Loop Invariant Derived loop invariant: ((((((!(\old(NP) == \old(MPR1)) || 0 <= status) || !(\old(SKIP1) == \old(s))) || 1 == \old(pended)) || !(0 == \old(compRegistered))) || !(\old(s) == \old(MPR1))) || !(\old(s) == \old(MPR3))) || !(\old(IPC) <= \old(s)) - InvariantResult [Line: 106]: Loop Invariant Derived loop invariant: (((((((!(1 <= NP) || !(NP + 2 <= SKIP1)) || !(NP + 4 <= MPR1)) || 1 == pended) || !(NP == \old(s))) || !(SKIP2 + 3 <= IPC)) || (((((\old(compRegistered) == compRegistered && s == NP) && setEventCalled == \old(setEventCalled)) && myStatus == \old(myStatus)) && \old(customIrp) == customIrp) && lowerDriverReturn == \old(lowerDriverReturn))) || !(NP <= 1)) || !(0 == \old(compRegistered)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((((((!(1 <= NP) || !(NP + 2 <= SKIP1)) || !(NP + 4 <= MPR1)) || 1 == pended) || !(NP == \old(s))) || !(SKIP2 + 3 <= IPC)) || (((((\old(compRegistered) == compRegistered && s == NP) && setEventCalled == \old(setEventCalled)) && myStatus == \old(myStatus)) && \old(customIrp) == customIrp) && lowerDriverReturn == \old(lowerDriverReturn))) || !(NP <= 1)) || !(0 == \old(compRegistered)) - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: (((((!(SKIP1 == \old(s)) || ((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && SKIP1 == s)) || !(NP + 2 <= SKIP1)) || 1 == pended) || !(0 == compRegistered)) || !(SKIP2 + 3 <= IPC)) && ((((((((!(1 <= NP) || MPR1 == s) || !(NP + 2 <= SKIP1)) || !(NP + 4 <= MPR1)) || 1 == pended) || !(NP == \old(s))) || !(SKIP2 + 3 <= IPC)) || !(NP <= 1)) || !(1 <= compRegistered)) - InvariantResult [Line: 526]: Loop Invariant Derived loop invariant: ((((((((!(1 == \old(setEventCalled)) || !(MPR3 == \old(s))) || !(1 <= NP)) || !(NP + 2 <= SKIP1)) || !(NP + 4 <= MPR1)) || 1 == pended) || !(SKIP2 + 3 <= IPC)) || !(NP <= 1)) || !(1 <= compRegistered)) && (((((((((!(1 == \old(setEventCalled)) || !(1 <= NP)) || ((s == NP && setEventCalled == \old(setEventCalled)) && \old(customIrp) == customIrp)) || !(NP + 2 <= SKIP1)) || !(NP + 4 <= MPR1)) || 1 == pended) || !(NP == \old(s))) || !(SKIP2 + 3 <= IPC)) || !(NP <= 1)) || !(1 <= compRegistered)) - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: (((((((!(1 <= NP) || !(NP + 2 <= SKIP1)) || !(NP + 4 <= MPR1)) || 1 == pended) || !(NP == \old(s))) || !(SKIP2 + 3 <= IPC)) || (((((\old(compRegistered) == compRegistered && s == NP) && setEventCalled == \old(setEventCalled)) && myStatus == \old(myStatus)) && \old(customIrp) == customIrp) && lowerDriverReturn == \old(lowerDriverReturn))) || !(NP <= 1)) || !(0 == \old(compRegistered)) - InvariantResult [Line: 456]: Loop Invariant Derived loop invariant: (((((!(SKIP1 == \old(s)) || ((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && SKIP1 == s)) || !(NP + 2 <= SKIP1)) || 1 == pended) || !(0 == compRegistered)) || !(SKIP2 + 3 <= IPC)) && ((((((((!(1 <= NP) || !(NP + 2 <= SKIP1)) || !(NP + 4 <= MPR1)) || 1 == pended) || !(NP == \old(s))) || !(SKIP2 + 3 <= IPC)) || !(NP <= 1)) || (MPR1 == s && setEventCalled == 1)) || !(1 <= compRegistered)) - InvariantResult [Line: 548]: Loop Invariant Derived loop invariant: (((((((((!(1 == \old(setEventCalled)) || !(1 <= NP)) || !(NP + 2 <= SKIP1)) || !(NP + 4 <= MPR1)) || 1 == pended) || !(NP == \old(s))) || s == \old(s)) || !(SKIP2 + 3 <= IPC)) || !(NP <= 1)) || !(1 <= compRegistered)) && (((((((((!(1 == \old(setEventCalled)) || !(MPR3 == \old(s))) || !(1 <= NP)) || s == NP) || !(NP + 2 <= SKIP1)) || !(NP + 4 <= MPR1)) || 1 == pended) || !(SKIP2 + 3 <= IPC)) || !(NP <= 1)) || !(1 <= compRegistered)) - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: (((((((((!(1 <= NP) || (((MPR1 == s && 259 <= returnVal2) && setEventCalled == 1) && returnVal2 <= 259)) || (returnVal2 <= 0 && MPR1 == s)) || !(NP + 2 <= SKIP1)) || !(NP + 4 <= MPR1)) || 1 == pended) || !(NP == \old(s))) || !(SKIP2 + 3 <= IPC)) || !(NP <= 1)) || !(1 <= compRegistered)) && (((((!(SKIP1 == \old(s)) || ((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && SKIP1 == s)) || !(NP + 2 <= SKIP1)) || 1 == pended) || !(0 == compRegistered)) || !(SKIP2 + 3 <= IPC)) - InvariantResult [Line: 550]: Loop Invariant Derived loop invariant: (((((((((!(1 == \old(setEventCalled)) || !(1 <= NP)) || !(NP + 2 <= SKIP1)) || !(NP + 4 <= MPR1)) || 1 == pended) || !(NP == \old(s))) || s == \old(s)) || !(SKIP2 + 3 <= IPC)) || !(NP <= 1)) || !(1 <= compRegistered)) && (((((((((!(1 == \old(setEventCalled)) || !(MPR3 == \old(s))) || !(1 <= NP)) || s == NP) || !(NP + 2 <= SKIP1)) || !(NP + 4 <= MPR1)) || 1 == pended) || !(SKIP2 + 3 <= IPC)) || !(NP <= 1)) || !(1 <= compRegistered)) - InvariantResult [Line: 375]: Loop Invariant Derived loop invariant: ((((((((!(1 == pended) && SKIP2 + 3 <= IPC) && NP + 2 <= SKIP1) || !(\old(NP) == \old(MPR1))) || !(\old(SKIP1) == \old(s))) || 1 == \old(pended)) || !(0 == \old(compRegistered))) || !(\old(s) == \old(MPR1))) || !(\old(s) == \old(MPR3))) || !(\old(IPC) <= \old(s)) - InvariantResult [Line: 103]: Loop Invariant Derived loop invariant: (((((((!(1 <= NP) || !(NP + 2 <= SKIP1)) || !(NP + 4 <= MPR1)) || 1 == pended) || !(NP == \old(s))) || !(SKIP2 + 3 <= IPC)) || (((((\old(compRegistered) == compRegistered && s == NP) && setEventCalled == \old(setEventCalled)) && myStatus == \old(myStatus)) && \old(customIrp) == customIrp) && lowerDriverReturn == \old(lowerDriverReturn))) || !(NP <= 1)) || !(0 == \old(compRegistered)) - InvariantResult [Line: 454]: Loop Invariant Derived loop invariant: (((((!(SKIP1 == \old(s)) || ((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && SKIP1 == s)) || !(NP + 2 <= SKIP1)) || 1 == pended) || !(0 == compRegistered)) || !(SKIP2 + 3 <= IPC)) && ((((((((!(1 <= NP) || MPR1 == s) || !(NP + 2 <= SKIP1)) || !(NP + 4 <= MPR1)) || 1 == pended) || !(NP == \old(s))) || !(SKIP2 + 3 <= IPC)) || !(NP <= 1)) || !(1 <= compRegistered)) - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: ((((((!(\old(NP) == \old(MPR1)) || !(\old(SKIP1) == \old(s))) || 1 == \old(pended)) || !(0 == \old(compRegistered))) || !(\old(s) == \old(MPR1))) || !(\old(s) == \old(MPR3))) || ((((((((1 <= NP && NP <= 1) && s == NP) && 0 <= status) && !(1 == pended)) && 0 == compRegistered) && NP + 4 <= MPR1) && SKIP2 + 3 <= IPC) && NP + 2 <= SKIP1)) || !(\old(IPC) <= \old(s)) - InvariantResult [Line: 385]: Loop Invariant Derived loop invariant: ((((((((!(1 == pended) && SKIP2 + 3 <= IPC) && NP + 2 <= SKIP1) || !(\old(NP) == \old(MPR1))) || !(\old(SKIP1) == \old(s))) || 1 == \old(pended)) || !(0 == \old(compRegistered))) || !(\old(s) == \old(MPR1))) || !(\old(s) == \old(MPR3))) || !(\old(IPC) <= \old(s)) - StatisticsResult: Ultimate Automizer benchmark data CFG has 13 procedures, 151 locations, 1 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 55.6s, OverallIterations: 18, TraceHistogramMax: 1, AutomataDifference: 41.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 2162 SDtfs, 3128 SDslu, 2862 SDs, 0 SdLazy, 5428 SolverSat, 877 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 9.6s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 353 GetRequests, 168 SyntacticMatches, 3 SemanticMatches, 182 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 191 ImplicationChecksByTransitivity, 5.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=217occurred in iteration=3, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 6.5s AutomataMinimizationTime, 18 MinimizatonAttempts, 189 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 53 LocationsWithAnnotation, 283 PreInvPairs, 349 NumberOfFragments, 3008 HoareAnnotationTreeSize, 283 FomulaSimplifications, 2295 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 53 FomulaSimplificationsInter, 6878 FormulaSimplificationTreeSizeReductionInter, 5.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 5.8s InterpolantComputationTime, 927 NumberOfCodeBlocks, 927 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 909 ConstructedInterpolants, 0 QuantifiedInterpolants, 205310 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 18 InterpolantComputations, 18 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...