/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationJordan_32.epf -i ../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-34549b5 [2022-04-08 08:13:45,643 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-04-08 08:13:45,645 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-04-08 08:13:45,683 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-04-08 08:13:45,683 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-04-08 08:13:45,684 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-04-08 08:13:45,686 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-04-08 08:13:45,688 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-04-08 08:13:45,689 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-04-08 08:13:45,693 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-04-08 08:13:45,694 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-04-08 08:13:45,695 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-04-08 08:13:45,695 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-04-08 08:13:45,696 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-04-08 08:13:45,698 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-04-08 08:13:45,700 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-04-08 08:13:45,701 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-04-08 08:13:45,701 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-04-08 08:13:45,703 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-04-08 08:13:45,707 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-04-08 08:13:45,708 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-04-08 08:13:45,709 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-04-08 08:13:45,710 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-04-08 08:13:45,710 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-04-08 08:13:45,711 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-04-08 08:13:45,716 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-04-08 08:13:45,716 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-04-08 08:13:45,716 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-04-08 08:13:45,717 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-04-08 08:13:45,717 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-04-08 08:13:45,718 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-04-08 08:13:45,718 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-04-08 08:13:45,719 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-04-08 08:13:45,720 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-04-08 08:13:45,720 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-04-08 08:13:45,720 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-04-08 08:13:45,721 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-04-08 08:13:45,721 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-04-08 08:13:45,721 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-04-08 08:13:45,721 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-04-08 08:13:45,722 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-04-08 08:13:45,723 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-04-08 08:13:45,723 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationJordan_32.epf [2022-04-08 08:13:45,732 INFO L113 SettingsManager]: Loading preferences was successful [2022-04-08 08:13:45,732 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-04-08 08:13:45,733 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-04-08 08:13:45,733 INFO L138 SettingsManager]: * sizeof long=4 [2022-04-08 08:13:45,733 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-04-08 08:13:45,733 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-04-08 08:13:45,733 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-04-08 08:13:45,733 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-04-08 08:13:45,734 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-04-08 08:13:45,734 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-04-08 08:13:45,734 INFO L138 SettingsManager]: * sizeof long double=12 [2022-04-08 08:13:45,734 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-04-08 08:13:45,734 INFO L138 SettingsManager]: * Use constant arrays=true [2022-04-08 08:13:45,734 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-04-08 08:13:45,735 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-04-08 08:13:45,735 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-04-08 08:13:45,735 INFO L138 SettingsManager]: * To the following directory=./dump/ [2022-04-08 08:13:45,735 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-04-08 08:13:45,735 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-08 08:13:45,735 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-04-08 08:13:45,735 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=Craig_NestedInterpolation [2022-04-08 08:13:45,735 INFO L138 SettingsManager]: * Trace refinement strategy=ACCELERATED_INTERPOLATION [2022-04-08 08:13:45,735 INFO L138 SettingsManager]: * Trace refinement strategy used in Accelerated Interpolation=CAMEL [2022-04-08 08:13:45,735 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-04-08 08:13:45,735 INFO L138 SettingsManager]: * Loop acceleration method that is used by accelerated interpolation=JORDAN [2022-04-08 08:13:45,736 INFO L138 SettingsManager]: * Use separate solver for trace checks=false WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-04-08 08:13:45,920 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-04-08 08:13:45,938 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-04-08 08:13:45,940 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-04-08 08:13:45,941 INFO L271 PluginConnector]: Initializing CDTParser... [2022-04-08 08:13:45,941 INFO L275 PluginConnector]: CDTParser initialized [2022-04-08 08:13:45,942 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c [2022-04-08 08:13:45,984 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fb5014af6/ad4577c237b246eb9241431d8b5206ab/FLAGbdecb3cf1 [2022-04-08 08:13:46,322 INFO L306 CDTParser]: Found 1 translation units. [2022-04-08 08:13:46,323 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c [2022-04-08 08:13:46,331 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fb5014af6/ad4577c237b246eb9241431d8b5206ab/FLAGbdecb3cf1 [2022-04-08 08:13:46,741 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fb5014af6/ad4577c237b246eb9241431d8b5206ab [2022-04-08 08:13:46,743 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-04-08 08:13:46,744 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2022-04-08 08:13:46,747 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-04-08 08:13:46,747 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-04-08 08:13:46,749 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-04-08 08:13:46,750 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.04 08:13:46" (1/1) ... [2022-04-08 08:13:46,751 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5cb7de22 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 08:13:46, skipping insertion in model container [2022-04-08 08:13:46,751 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.04 08:13:46" (1/1) ... [2022-04-08 08:13:46,756 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-04-08 08:13:46,797 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-04-08 08:13:47,006 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c[29656,29669] [2022-04-08 08:13:47,009 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-08 08:13:47,015 INFO L203 MainTranslator]: Completed pre-run [2022-04-08 08:13:47,080 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c[29656,29669] [2022-04-08 08:13:47,081 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-08 08:13:47,092 INFO L208 MainTranslator]: Completed translation [2022-04-08 08:13:47,093 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 08:13:47 WrapperNode [2022-04-08 08:13:47,093 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-04-08 08:13:47,094 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-04-08 08:13:47,094 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-04-08 08:13:47,094 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-04-08 08:13:47,114 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 08:13:47" (1/1) ... [2022-04-08 08:13:47,114 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 08:13:47" (1/1) ... [2022-04-08 08:13:47,133 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 08:13:47" (1/1) ... [2022-04-08 08:13:47,133 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 08:13:47" (1/1) ... [2022-04-08 08:13:47,167 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 08:13:47" (1/1) ... [2022-04-08 08:13:47,187 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 08:13:47" (1/1) ... [2022-04-08 08:13:47,190 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 08:13:47" (1/1) ... [2022-04-08 08:13:47,200 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-04-08 08:13:47,201 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-04-08 08:13:47,201 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-04-08 08:13:47,201 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-04-08 08:13:47,202 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 08:13:47" (1/1) ... [2022-04-08 08:13:47,219 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-08 08:13:47,229 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-08 08:13:47,242 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-04-08 08:13:47,261 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-04-08 08:13:47,280 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2022-04-08 08:13:47,280 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-04-08 08:13:47,281 INFO L138 BoogieDeclarations]: Found implementation of procedure reach_error [2022-04-08 08:13:47,281 INFO L138 BoogieDeclarations]: Found implementation of procedure stub_driver_init [2022-04-08 08:13:47,281 INFO L138 BoogieDeclarations]: Found implementation of procedure _BLAST_init [2022-04-08 08:13:47,281 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_PnP [2022-04-08 08:13:47,282 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2022-04-08 08:13:47,282 INFO L138 BoogieDeclarations]: Found implementation of procedure stubMoreProcessingRequired [2022-04-08 08:13:47,282 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2022-04-08 08:13:47,282 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2022-04-08 08:13:47,282 INFO L138 BoogieDeclarations]: Found implementation of procedure KeSetEvent [2022-04-08 08:13:47,283 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2022-04-08 08:13:47,283 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Complete [2022-04-08 08:13:47,283 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_CreateClose [2022-04-08 08:13:47,284 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_DispatchPassThrough [2022-04-08 08:13:47,284 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Power [2022-04-08 08:13:47,284 INFO L138 BoogieDeclarations]: Found implementation of procedure PoCallDriver [2022-04-08 08:13:47,284 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_InternIoCtl [2022-04-08 08:13:47,284 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2022-04-08 08:13:47,284 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2022-04-08 08:13:47,284 INFO L130 BoogieDeclarations]: Found specification of procedure __assert_fail [2022-04-08 08:13:47,284 INFO L130 BoogieDeclarations]: Found specification of procedure reach_error [2022-04-08 08:13:47,284 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-04-08 08:13:47,284 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_char [2022-04-08 08:13:47,284 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2022-04-08 08:13:47,284 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2022-04-08 08:13:47,284 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_PnP [2022-04-08 08:13:47,284 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2022-04-08 08:13:47,285 INFO L130 BoogieDeclarations]: Found specification of procedure KeSetEvent [2022-04-08 08:13:47,285 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2022-04-08 08:13:47,285 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Complete [2022-04-08 08:13:47,285 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_CreateClose [2022-04-08 08:13:47,285 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_DispatchPassThrough [2022-04-08 08:13:47,285 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Power [2022-04-08 08:13:47,285 INFO L130 BoogieDeclarations]: Found specification of procedure PoCallDriver [2022-04-08 08:13:47,285 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_InternIoCtl [2022-04-08 08:13:47,285 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2022-04-08 08:13:47,285 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2022-04-08 08:13:47,285 INFO L130 BoogieDeclarations]: Found specification of procedure stub_driver_init [2022-04-08 08:13:47,285 INFO L130 BoogieDeclarations]: Found specification of procedure _BLAST_init [2022-04-08 08:13:47,285 INFO L130 BoogieDeclarations]: Found specification of procedure main [2022-04-08 08:13:47,285 INFO L130 BoogieDeclarations]: Found specification of procedure stubMoreProcessingRequired [2022-04-08 08:13:47,286 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2022-04-08 08:13:47,286 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-04-08 08:13:47,286 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-04-08 08:13:47,286 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-04-08 08:13:47,286 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-04-08 08:13:47,286 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-04-08 08:13:47,398 INFO L234 CfgBuilder]: Building ICFG [2022-04-08 08:13:47,400 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-04-08 08:13:47,491 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-08 08:13:47,615 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##18: assume false; [2022-04-08 08:13:47,615 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##19: assume !false; [2022-04-08 08:13:47,625 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-08 08:13:47,674 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-08 08:13:47,674 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-08 08:13:47,807 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-08 08:13:47,826 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##16: assume !false; [2022-04-08 08:13:47,826 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##15: assume false; [2022-04-08 08:13:47,832 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-08 08:13:47,946 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##43: assume false; [2022-04-08 08:13:47,946 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##44: assume !false; [2022-04-08 08:13:47,952 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-08 08:13:47,976 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##10: assume !false; [2022-04-08 08:13:47,977 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##9: assume false; [2022-04-08 08:13:47,980 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-08 08:13:47,999 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-08 08:13:47,999 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-08 08:13:48,054 INFO L275 CfgBuilder]: Performing block encoding [2022-04-08 08:13:48,060 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-04-08 08:13:48,061 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-04-08 08:13:48,062 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.04 08:13:48 BoogieIcfgContainer [2022-04-08 08:13:48,062 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-04-08 08:13:48,069 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-04-08 08:13:48,069 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-04-08 08:13:48,072 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-04-08 08:13:48,073 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 08.04 08:13:46" (1/3) ... [2022-04-08 08:13:48,073 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1520d8d0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.04 08:13:48, skipping insertion in model container [2022-04-08 08:13:48,073 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 08:13:47" (2/3) ... [2022-04-08 08:13:48,073 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1520d8d0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.04 08:13:48, skipping insertion in model container [2022-04-08 08:13:48,073 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.04 08:13:48" (3/3) ... [2022-04-08 08:13:48,074 INFO L111 eAbstractionObserver]: Analyzing ICFG kbfiltr_simpl2.cil-2.c [2022-04-08 08:13:48,078 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:Craig_NestedInterpolation Determinization: PREDICATE_ABSTRACTION [2022-04-08 08:13:48,078 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-04-08 08:13:48,109 INFO L339 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-04-08 08:13:48,114 INFO L340 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=Craig_NestedInterpolation, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP [2022-04-08 08:13:48,114 INFO L341 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-04-08 08:13:48,138 INFO L276 IsEmpty]: Start isEmpty. Operand has 240 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 200 states have internal predecessors, (284), 39 states have call successors, (39), 17 states have call predecessors, (39), 17 states have return successors, (39), 37 states have call predecessors, (39), 39 states have call successors, (39) [2022-04-08 08:13:48,143 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-04-08 08:13:48,143 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:13:48,144 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:13:48,144 INFO L403 AbstractCegarLoop]: === Iteration 1 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:13:48,147 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:13:48,148 INFO L85 PathProgramCache]: Analyzing trace with hash -1235546278, now seen corresponding path program 1 times [2022-04-08 08:13:48,153 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:13:48,154 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1208144294] [2022-04-08 08:13:48,161 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:13:48,161 INFO L85 PathProgramCache]: Analyzing trace with hash -1235546278, now seen corresponding path program 2 times [2022-04-08 08:13:48,163 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:13:48,163 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [306613683] [2022-04-08 08:13:48,164 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:13:48,164 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:13:48,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:48,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:13:48,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:48,468 INFO L290 TraceCheckUtils]: 0: Hoare triple {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {243#true} is VALID [2022-04-08 08:13:48,469 INFO L290 TraceCheckUtils]: 1: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-08 08:13:48,469 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {243#true} {243#true} #783#return; {243#true} is VALID [2022-04-08 08:13:48,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:13:48,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:48,518 INFO L290 TraceCheckUtils]: 0: Hoare triple {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {243#true} is VALID [2022-04-08 08:13:48,519 INFO L290 TraceCheckUtils]: 1: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-08 08:13:48,519 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {243#true} {248#(= main_~status~1 0)} #715#return; {248#(= main_~status~1 0)} is VALID [2022-04-08 08:13:48,522 INFO L272 TraceCheckUtils]: 0: Hoare triple {243#true} call ULTIMATE.init(); {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:13:48,522 INFO L290 TraceCheckUtils]: 1: Hoare triple {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {243#true} is VALID [2022-04-08 08:13:48,522 INFO L290 TraceCheckUtils]: 2: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-08 08:13:48,522 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {243#true} {243#true} #783#return; {243#true} is VALID [2022-04-08 08:13:48,523 INFO L272 TraceCheckUtils]: 4: Hoare triple {243#true} call #t~ret81 := main(); {243#true} is VALID [2022-04-08 08:13:48,524 INFO L290 TraceCheckUtils]: 5: Hoare triple {243#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {248#(= main_~status~1 0)} is VALID [2022-04-08 08:13:48,525 INFO L272 TraceCheckUtils]: 6: Hoare triple {248#(= main_~status~1 0)} call _BLAST_init(); {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:13:48,525 INFO L290 TraceCheckUtils]: 7: Hoare triple {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {243#true} is VALID [2022-04-08 08:13:48,526 INFO L290 TraceCheckUtils]: 8: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-08 08:13:48,526 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {243#true} {248#(= main_~status~1 0)} #715#return; {248#(= main_~status~1 0)} is VALID [2022-04-08 08:13:48,527 INFO L290 TraceCheckUtils]: 10: Hoare triple {248#(= main_~status~1 0)} assume !(~status~1 >= 0); {244#false} is VALID [2022-04-08 08:13:48,527 INFO L290 TraceCheckUtils]: 11: Hoare triple {244#false} assume !(1 == ~pended~0); {244#false} is VALID [2022-04-08 08:13:48,527 INFO L290 TraceCheckUtils]: 12: Hoare triple {244#false} assume !(1 == ~pended~0); {244#false} is VALID [2022-04-08 08:13:48,528 INFO L290 TraceCheckUtils]: 13: Hoare triple {244#false} assume ~s~0 != ~UNLOADED~0; {244#false} is VALID [2022-04-08 08:13:48,528 INFO L290 TraceCheckUtils]: 14: Hoare triple {244#false} assume -1 != ~status~1; {244#false} is VALID [2022-04-08 08:13:48,529 INFO L290 TraceCheckUtils]: 15: Hoare triple {244#false} assume !(~s~0 != ~SKIP2~0); {244#false} is VALID [2022-04-08 08:13:48,529 INFO L290 TraceCheckUtils]: 16: Hoare triple {244#false} assume 1 == ~pended~0; {244#false} is VALID [2022-04-08 08:13:48,529 INFO L290 TraceCheckUtils]: 17: Hoare triple {244#false} assume 259 != ~status~1; {244#false} is VALID [2022-04-08 08:13:48,529 INFO L272 TraceCheckUtils]: 18: Hoare triple {244#false} call errorFn(); {244#false} is VALID [2022-04-08 08:13:48,529 INFO L290 TraceCheckUtils]: 19: Hoare triple {244#false} assume !false; {244#false} is VALID [2022-04-08 08:13:48,531 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:13:48,531 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:13:48,532 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [306613683] [2022-04-08 08:13:48,533 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [306613683] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:13:48,533 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:13:48,535 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-08 08:13:48,537 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:13:48,537 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1208144294] [2022-04-08 08:13:48,537 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1208144294] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:13:48,537 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:13:48,537 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-08 08:13:48,537 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [530614399] [2022-04-08 08:13:48,538 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:13:48,541 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-08 08:13:48,543 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:13:48,545 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-08 08:13:48,566 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:13:48,566 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-04-08 08:13:48,566 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:13:48,585 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-04-08 08:13:48,586 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-08 08:13:48,593 INFO L87 Difference]: Start difference. First operand has 240 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 200 states have internal predecessors, (284), 39 states have call successors, (39), 17 states have call predecessors, (39), 17 states have return successors, (39), 37 states have call predecessors, (39), 39 states have call successors, (39) Second operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-08 08:13:50,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:13:50,228 INFO L93 Difference]: Finished difference Result 417 states and 628 transitions. [2022-04-08 08:13:50,228 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-04-08 08:13:50,229 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-08 08:13:50,229 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:13:50,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-08 08:13:50,250 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 628 transitions. [2022-04-08 08:13:50,251 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-08 08:13:50,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 628 transitions. [2022-04-08 08:13:50,264 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 5 states and 628 transitions. [2022-04-08 08:13:50,851 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 628 edges. 628 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:13:50,879 INFO L225 Difference]: With dead ends: 417 [2022-04-08 08:13:50,880 INFO L226 Difference]: Without dead ends: 259 [2022-04-08 08:13:50,883 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-08 08:13:50,885 INFO L913 BasicCegarLoop]: 297 mSDtfsCounter, 328 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 410 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 334 SdHoareTripleChecker+Valid, 444 SdHoareTripleChecker+Invalid, 491 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 410 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-08 08:13:50,886 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [334 Valid, 444 Invalid, 491 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 410 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-08 08:13:50,898 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-04-08 08:13:50,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 231. [2022-04-08 08:13:50,952 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:13:50,953 INFO L82 GeneralOperation]: Start isEquivalent. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-08 08:13:50,955 INFO L74 IsIncluded]: Start isIncluded. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-08 08:13:50,955 INFO L87 Difference]: Start difference. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-08 08:13:50,971 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:13:50,971 INFO L93 Difference]: Finished difference Result 259 states and 367 transitions. [2022-04-08 08:13:50,971 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 367 transitions. [2022-04-08 08:13:50,974 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:13:50,974 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:13:50,975 INFO L74 IsIncluded]: Start isIncluded. First operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 259 states. [2022-04-08 08:13:50,976 INFO L87 Difference]: Start difference. First operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 259 states. [2022-04-08 08:13:50,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:13:50,990 INFO L93 Difference]: Finished difference Result 259 states and 367 transitions. [2022-04-08 08:13:50,990 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 367 transitions. [2022-04-08 08:13:50,991 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:13:50,991 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:13:50,992 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:13:50,992 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:13:50,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-08 08:13:51,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 326 transitions. [2022-04-08 08:13:51,007 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 326 transitions. Word has length 20 [2022-04-08 08:13:51,007 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:13:51,007 INFO L478 AbstractCegarLoop]: Abstraction has 231 states and 326 transitions. [2022-04-08 08:13:51,007 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-08 08:13:51,008 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 231 states and 326 transitions. [2022-04-08 08:13:51,322 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 326 edges. 326 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:13:51,322 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 326 transitions. [2022-04-08 08:13:51,323 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-08 08:13:51,323 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:13:51,323 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:13:51,323 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-04-08 08:13:51,324 INFO L403 AbstractCegarLoop]: === Iteration 2 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:13:51,324 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:13:51,324 INFO L85 PathProgramCache]: Analyzing trace with hash -225403307, now seen corresponding path program 1 times [2022-04-08 08:13:51,324 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:13:51,324 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1836709636] [2022-04-08 08:13:51,329 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:13:51,330 INFO L85 PathProgramCache]: Analyzing trace with hash -225403307, now seen corresponding path program 2 times [2022-04-08 08:13:51,330 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:13:51,330 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773525828] [2022-04-08 08:13:51,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:13:51,331 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:13:51,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:51,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:13:51,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:51,468 INFO L290 TraceCheckUtils]: 0: Hoare triple {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-08 08:13:51,468 INFO L290 TraceCheckUtils]: 1: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-08 08:13:51,468 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2070#true} {2070#true} #783#return; {2070#true} is VALID [2022-04-08 08:13:51,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:13:51,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:51,499 INFO L290 TraceCheckUtils]: 0: Hoare triple {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2070#true} is VALID [2022-04-08 08:13:51,499 INFO L290 TraceCheckUtils]: 1: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-08 08:13:51,500 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2070#true} {2070#true} #715#return; {2070#true} is VALID [2022-04-08 08:13:51,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:13:51,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:51,518 INFO L290 TraceCheckUtils]: 0: Hoare triple {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,519 INFO L290 TraceCheckUtils]: 1: Hoare triple {2081#(= ~s~0 ~NP~0)} assume true; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,519 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2081#(= ~s~0 ~NP~0)} {2070#true} #717#return; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,520 INFO L272 TraceCheckUtils]: 0: Hoare triple {2070#true} call ULTIMATE.init(); {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:13:51,521 INFO L290 TraceCheckUtils]: 1: Hoare triple {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-08 08:13:51,521 INFO L290 TraceCheckUtils]: 2: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-08 08:13:51,521 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {2070#true} {2070#true} #783#return; {2070#true} is VALID [2022-04-08 08:13:51,521 INFO L272 TraceCheckUtils]: 4: Hoare triple {2070#true} call #t~ret81 := main(); {2070#true} is VALID [2022-04-08 08:13:51,521 INFO L290 TraceCheckUtils]: 5: Hoare triple {2070#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {2070#true} is VALID [2022-04-08 08:13:51,522 INFO L272 TraceCheckUtils]: 6: Hoare triple {2070#true} call _BLAST_init(); {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:13:51,522 INFO L290 TraceCheckUtils]: 7: Hoare triple {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2070#true} is VALID [2022-04-08 08:13:51,522 INFO L290 TraceCheckUtils]: 8: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-08 08:13:51,523 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {2070#true} {2070#true} #715#return; {2070#true} is VALID [2022-04-08 08:13:51,524 INFO L290 TraceCheckUtils]: 10: Hoare triple {2070#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-08 08:13:51,524 INFO L290 TraceCheckUtils]: 11: Hoare triple {2070#true} assume !(0 == ~irp_choice~0); {2070#true} is VALID [2022-04-08 08:13:51,525 INFO L272 TraceCheckUtils]: 12: Hoare triple {2070#true} call stub_driver_init(); {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:13:51,527 INFO L290 TraceCheckUtils]: 13: Hoare triple {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,528 INFO L290 TraceCheckUtils]: 14: Hoare triple {2081#(= ~s~0 ~NP~0)} assume true; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,529 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {2081#(= ~s~0 ~NP~0)} {2070#true} #717#return; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,530 INFO L290 TraceCheckUtils]: 16: Hoare triple {2081#(= ~s~0 ~NP~0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,530 INFO L290 TraceCheckUtils]: 17: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~tmp_ndt_1~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,530 INFO L272 TraceCheckUtils]: 18: Hoare triple {2081#(= ~s~0 ~NP~0)} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,531 INFO L290 TraceCheckUtils]: 19: Hoare triple {2081#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,532 INFO L290 TraceCheckUtils]: 20: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~irpStack__MajorFunction~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,533 INFO L290 TraceCheckUtils]: 21: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,533 INFO L290 TraceCheckUtils]: 22: Hoare triple {2081#(= ~s~0 ~NP~0)} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,534 INFO L272 TraceCheckUtils]: 23: Hoare triple {2081#(= ~s~0 ~NP~0)} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,534 INFO L290 TraceCheckUtils]: 24: Hoare triple {2081#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 08:13:51,535 INFO L290 TraceCheckUtils]: 25: Hoare triple {2081#(= ~s~0 ~NP~0)} assume !(~s~0 == ~NP~0); {2071#false} is VALID [2022-04-08 08:13:51,535 INFO L272 TraceCheckUtils]: 26: Hoare triple {2071#false} call errorFn(); {2071#false} is VALID [2022-04-08 08:13:51,535 INFO L290 TraceCheckUtils]: 27: Hoare triple {2071#false} assume !false; {2071#false} is VALID [2022-04-08 08:13:51,536 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:13:51,536 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:13:51,538 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773525828] [2022-04-08 08:13:51,539 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [773525828] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:13:51,539 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:13:51,540 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-08 08:13:51,542 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:13:51,542 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1836709636] [2022-04-08 08:13:51,543 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1836709636] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:13:51,547 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:13:51,547 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-08 08:13:51,548 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1249967619] [2022-04-08 08:13:51,548 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:13:51,549 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-08 08:13:51,549 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:13:51,549 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:51,570 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:13:51,570 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-08 08:13:51,570 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:13:51,571 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-08 08:13:51,571 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-08 08:13:51,571 INFO L87 Difference]: Start difference. First operand 231 states and 326 transitions. Second operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:52,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:13:52,927 INFO L93 Difference]: Finished difference Result 410 states and 565 transitions. [2022-04-08 08:13:52,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-08 08:13:52,927 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-08 08:13:52,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:13:52,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:52,933 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 565 transitions. [2022-04-08 08:13:52,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:52,939 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 565 transitions. [2022-04-08 08:13:52,939 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 565 transitions. [2022-04-08 08:13:53,429 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 565 edges. 565 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:13:53,440 INFO L225 Difference]: With dead ends: 410 [2022-04-08 08:13:53,440 INFO L226 Difference]: Without dead ends: 349 [2022-04-08 08:13:53,441 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-08 08:13:53,443 INFO L913 BasicCegarLoop]: 357 mSDtfsCounter, 537 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 376 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 537 SdHoareTripleChecker+Valid, 469 SdHoareTripleChecker+Invalid, 472 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 376 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-08 08:13:53,444 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [537 Valid, 469 Invalid, 472 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 376 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-08 08:13:53,447 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 349 states. [2022-04-08 08:13:53,484 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 349 to 304. [2022-04-08 08:13:53,484 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:13:53,485 INFO L82 GeneralOperation]: Start isEquivalent. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-08 08:13:53,486 INFO L74 IsIncluded]: Start isIncluded. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-08 08:13:53,487 INFO L87 Difference]: Start difference. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-08 08:13:53,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:13:53,496 INFO L93 Difference]: Finished difference Result 349 states and 477 transitions. [2022-04-08 08:13:53,496 INFO L276 IsEmpty]: Start isEmpty. Operand 349 states and 477 transitions. [2022-04-08 08:13:53,497 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:13:53,497 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:13:53,498 INFO L74 IsIncluded]: Start isIncluded. First operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 349 states. [2022-04-08 08:13:53,499 INFO L87 Difference]: Start difference. First operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 349 states. [2022-04-08 08:13:53,508 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:13:53,508 INFO L93 Difference]: Finished difference Result 349 states and 477 transitions. [2022-04-08 08:13:53,508 INFO L276 IsEmpty]: Start isEmpty. Operand 349 states and 477 transitions. [2022-04-08 08:13:53,509 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:13:53,509 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:13:53,509 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:13:53,509 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:13:53,510 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-08 08:13:53,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 415 transitions. [2022-04-08 08:13:53,519 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 415 transitions. Word has length 28 [2022-04-08 08:13:53,519 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:13:53,520 INFO L478 AbstractCegarLoop]: Abstraction has 304 states and 415 transitions. [2022-04-08 08:13:53,520 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:53,520 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 304 states and 415 transitions. [2022-04-08 08:13:53,914 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 415 edges. 415 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:13:53,914 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 415 transitions. [2022-04-08 08:13:53,914 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-08 08:13:53,915 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:13:53,915 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:13:53,915 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-04-08 08:13:53,915 INFO L403 AbstractCegarLoop]: === Iteration 3 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:13:53,915 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:13:53,915 INFO L85 PathProgramCache]: Analyzing trace with hash -809602478, now seen corresponding path program 1 times [2022-04-08 08:13:53,916 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:13:53,916 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [626433539] [2022-04-08 08:13:53,916 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:13:53,916 INFO L85 PathProgramCache]: Analyzing trace with hash -809602478, now seen corresponding path program 2 times [2022-04-08 08:13:53,916 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:13:53,916 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2002863205] [2022-04-08 08:13:53,916 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:13:53,917 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:13:53,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:54,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:13:54,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:54,020 INFO L290 TraceCheckUtils]: 0: Hoare triple {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-08 08:13:54,021 INFO L290 TraceCheckUtils]: 1: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-08 08:13:54,021 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4218#true} {4218#true} #783#return; {4218#true} is VALID [2022-04-08 08:13:54,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:13:54,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:54,048 INFO L290 TraceCheckUtils]: 0: Hoare triple {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4218#true} is VALID [2022-04-08 08:13:54,048 INFO L290 TraceCheckUtils]: 1: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-08 08:13:54,048 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4218#true} {4218#true} #715#return; {4218#true} is VALID [2022-04-08 08:13:54,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:13:54,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:54,068 INFO L290 TraceCheckUtils]: 0: Hoare triple {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,068 INFO L290 TraceCheckUtils]: 1: Hoare triple {4229#(= ~compRegistered~0 0)} assume true; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,068 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4229#(= ~compRegistered~0 0)} {4218#true} #717#return; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,070 INFO L272 TraceCheckUtils]: 0: Hoare triple {4218#true} call ULTIMATE.init(); {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:13:54,070 INFO L290 TraceCheckUtils]: 1: Hoare triple {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-08 08:13:54,070 INFO L290 TraceCheckUtils]: 2: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-08 08:13:54,070 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {4218#true} {4218#true} #783#return; {4218#true} is VALID [2022-04-08 08:13:54,070 INFO L272 TraceCheckUtils]: 4: Hoare triple {4218#true} call #t~ret81 := main(); {4218#true} is VALID [2022-04-08 08:13:54,071 INFO L290 TraceCheckUtils]: 5: Hoare triple {4218#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {4218#true} is VALID [2022-04-08 08:13:54,072 INFO L272 TraceCheckUtils]: 6: Hoare triple {4218#true} call _BLAST_init(); {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:13:54,072 INFO L290 TraceCheckUtils]: 7: Hoare triple {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4218#true} is VALID [2022-04-08 08:13:54,072 INFO L290 TraceCheckUtils]: 8: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-08 08:13:54,072 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {4218#true} {4218#true} #715#return; {4218#true} is VALID [2022-04-08 08:13:54,072 INFO L290 TraceCheckUtils]: 10: Hoare triple {4218#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-08 08:13:54,072 INFO L290 TraceCheckUtils]: 11: Hoare triple {4218#true} assume !(0 == ~irp_choice~0); {4218#true} is VALID [2022-04-08 08:13:54,073 INFO L272 TraceCheckUtils]: 12: Hoare triple {4218#true} call stub_driver_init(); {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:13:54,073 INFO L290 TraceCheckUtils]: 13: Hoare triple {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,074 INFO L290 TraceCheckUtils]: 14: Hoare triple {4229#(= ~compRegistered~0 0)} assume true; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,074 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {4229#(= ~compRegistered~0 0)} {4218#true} #717#return; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,074 INFO L290 TraceCheckUtils]: 16: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,075 INFO L290 TraceCheckUtils]: 17: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,078 INFO L290 TraceCheckUtils]: 18: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,079 INFO L290 TraceCheckUtils]: 19: Hoare triple {4229#(= ~compRegistered~0 0)} assume 3 == ~tmp_ndt_3~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,080 INFO L272 TraceCheckUtils]: 20: Hoare triple {4229#(= ~compRegistered~0 0)} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,080 INFO L290 TraceCheckUtils]: 21: Hoare triple {4229#(= ~compRegistered~0 0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,080 INFO L290 TraceCheckUtils]: 22: Hoare triple {4229#(= ~compRegistered~0 0)} assume 0 == ~irpStack__MinorFunction~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,081 INFO L290 TraceCheckUtils]: 23: Hoare triple {4229#(= ~compRegistered~0 0)} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,081 INFO L290 TraceCheckUtils]: 24: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(~s~0 != ~NP~0); {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:54,081 INFO L290 TraceCheckUtils]: 25: Hoare triple {4229#(= ~compRegistered~0 0)} assume 0 != ~compRegistered~0; {4219#false} is VALID [2022-04-08 08:13:54,081 INFO L272 TraceCheckUtils]: 26: Hoare triple {4219#false} call errorFn(); {4219#false} is VALID [2022-04-08 08:13:54,082 INFO L290 TraceCheckUtils]: 27: Hoare triple {4219#false} assume !false; {4219#false} is VALID [2022-04-08 08:13:54,082 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:13:54,082 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:13:54,082 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2002863205] [2022-04-08 08:13:54,082 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2002863205] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:13:54,082 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:13:54,082 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-08 08:13:54,082 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:13:54,083 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [626433539] [2022-04-08 08:13:54,083 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [626433539] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:13:54,083 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:13:54,083 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-08 08:13:54,083 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [755145019] [2022-04-08 08:13:54,083 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:13:54,083 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-08 08:13:54,083 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:13:54,084 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:54,105 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:13:54,105 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-08 08:13:54,105 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:13:54,105 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-08 08:13:54,106 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-08 08:13:54,106 INFO L87 Difference]: Start difference. First operand 304 states and 415 transitions. Second operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:55,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:13:55,452 INFO L93 Difference]: Finished difference Result 487 states and 647 transitions. [2022-04-08 08:13:55,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-08 08:13:55,453 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-08 08:13:55,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:13:55,453 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:55,458 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 515 transitions. [2022-04-08 08:13:55,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:55,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 515 transitions. [2022-04-08 08:13:55,463 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 515 transitions. [2022-04-08 08:13:55,856 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 515 edges. 515 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:13:55,863 INFO L225 Difference]: With dead ends: 487 [2022-04-08 08:13:55,863 INFO L226 Difference]: Without dead ends: 368 [2022-04-08 08:13:55,864 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-08 08:13:55,865 INFO L913 BasicCegarLoop]: 267 mSDtfsCounter, 572 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 330 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 572 SdHoareTripleChecker+Valid, 386 SdHoareTripleChecker+Invalid, 431 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 330 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-08 08:13:55,865 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [572 Valid, 386 Invalid, 431 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 330 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-08 08:13:55,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 368 states. [2022-04-08 08:13:55,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 368 to 344. [2022-04-08 08:13:55,908 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:13:55,910 INFO L82 GeneralOperation]: Start isEquivalent. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 08:13:55,911 INFO L74 IsIncluded]: Start isIncluded. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 08:13:55,912 INFO L87 Difference]: Start difference. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 08:13:55,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:13:55,930 INFO L93 Difference]: Finished difference Result 368 states and 494 transitions. [2022-04-08 08:13:55,930 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 494 transitions. [2022-04-08 08:13:55,931 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:13:55,931 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:13:55,933 INFO L74 IsIncluded]: Start isIncluded. First operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 368 states. [2022-04-08 08:13:55,934 INFO L87 Difference]: Start difference. First operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 368 states. [2022-04-08 08:13:55,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:13:55,941 INFO L93 Difference]: Finished difference Result 368 states and 494 transitions. [2022-04-08 08:13:55,941 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 494 transitions. [2022-04-08 08:13:55,943 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:13:55,944 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:13:55,944 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:13:55,944 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:13:55,945 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 08:13:55,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 466 transitions. [2022-04-08 08:13:55,953 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 466 transitions. Word has length 28 [2022-04-08 08:13:55,953 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:13:55,953 INFO L478 AbstractCegarLoop]: Abstraction has 344 states and 466 transitions. [2022-04-08 08:13:55,955 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:55,955 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 344 states and 466 transitions. [2022-04-08 08:13:56,412 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 466 edges. 466 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:13:56,413 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 466 transitions. [2022-04-08 08:13:56,414 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-04-08 08:13:56,414 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:13:56,414 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:13:56,414 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-04-08 08:13:56,414 INFO L403 AbstractCegarLoop]: === Iteration 4 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:13:56,414 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:13:56,414 INFO L85 PathProgramCache]: Analyzing trace with hash -1415760533, now seen corresponding path program 1 times [2022-04-08 08:13:56,415 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:13:56,415 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1760576227] [2022-04-08 08:13:56,415 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:13:56,415 INFO L85 PathProgramCache]: Analyzing trace with hash -1415760533, now seen corresponding path program 2 times [2022-04-08 08:13:56,415 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:13:56,415 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1174901036] [2022-04-08 08:13:56,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:13:56,415 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:13:56,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:56,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:13:56,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:56,502 INFO L290 TraceCheckUtils]: 0: Hoare triple {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-08 08:13:56,504 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-08 08:13:56,504 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #783#return; {6638#true} is VALID [2022-04-08 08:13:56,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:13:56,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:56,526 INFO L290 TraceCheckUtils]: 0: Hoare triple {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-08 08:13:56,527 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-08 08:13:56,527 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #715#return; {6638#true} is VALID [2022-04-08 08:13:56,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:13:56,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:56,552 INFO L290 TraceCheckUtils]: 0: Hoare triple {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-08 08:13:56,552 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-08 08:13:56,552 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #717#return; {6638#true} is VALID [2022-04-08 08:13:56,554 INFO L272 TraceCheckUtils]: 0: Hoare triple {6638#true} call ULTIMATE.init(); {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:13:56,554 INFO L290 TraceCheckUtils]: 1: Hoare triple {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-08 08:13:56,554 INFO L290 TraceCheckUtils]: 2: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-08 08:13:56,554 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {6638#true} {6638#true} #783#return; {6638#true} is VALID [2022-04-08 08:13:56,554 INFO L272 TraceCheckUtils]: 4: Hoare triple {6638#true} call #t~ret81 := main(); {6638#true} is VALID [2022-04-08 08:13:56,554 INFO L290 TraceCheckUtils]: 5: Hoare triple {6638#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {6638#true} is VALID [2022-04-08 08:13:56,555 INFO L272 TraceCheckUtils]: 6: Hoare triple {6638#true} call _BLAST_init(); {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:13:56,555 INFO L290 TraceCheckUtils]: 7: Hoare triple {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-08 08:13:56,556 INFO L290 TraceCheckUtils]: 8: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-08 08:13:56,556 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {6638#true} {6638#true} #715#return; {6638#true} is VALID [2022-04-08 08:13:56,556 INFO L290 TraceCheckUtils]: 10: Hoare triple {6638#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-08 08:13:56,556 INFO L290 TraceCheckUtils]: 11: Hoare triple {6638#true} assume !(0 == ~irp_choice~0); {6638#true} is VALID [2022-04-08 08:13:56,556 INFO L272 TraceCheckUtils]: 12: Hoare triple {6638#true} call stub_driver_init(); {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:13:56,557 INFO L290 TraceCheckUtils]: 13: Hoare triple {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-08 08:13:56,557 INFO L290 TraceCheckUtils]: 14: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-08 08:13:56,557 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {6638#true} {6638#true} #717#return; {6638#true} is VALID [2022-04-08 08:13:56,557 INFO L290 TraceCheckUtils]: 16: Hoare triple {6638#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {6638#true} is VALID [2022-04-08 08:13:56,557 INFO L290 TraceCheckUtils]: 17: Hoare triple {6638#true} assume 0 == ~tmp_ndt_1~0; {6638#true} is VALID [2022-04-08 08:13:56,557 INFO L272 TraceCheckUtils]: 18: Hoare triple {6638#true} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {6638#true} is VALID [2022-04-08 08:13:56,557 INFO L290 TraceCheckUtils]: 19: Hoare triple {6638#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {6638#true} is VALID [2022-04-08 08:13:56,557 INFO L290 TraceCheckUtils]: 20: Hoare triple {6638#true} assume 0 == ~irpStack__MajorFunction~0; {6638#true} is VALID [2022-04-08 08:13:56,557 INFO L290 TraceCheckUtils]: 21: Hoare triple {6638#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {6638#true} is VALID [2022-04-08 08:13:56,558 INFO L290 TraceCheckUtils]: 22: Hoare triple {6638#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {6638#true} is VALID [2022-04-08 08:13:56,558 INFO L272 TraceCheckUtils]: 23: Hoare triple {6638#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {6638#true} is VALID [2022-04-08 08:13:56,558 INFO L290 TraceCheckUtils]: 24: Hoare triple {6638#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {6638#true} is VALID [2022-04-08 08:13:56,558 INFO L290 TraceCheckUtils]: 25: Hoare triple {6638#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:13:56,559 INFO L290 TraceCheckUtils]: 26: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:13:56,559 INFO L272 TraceCheckUtils]: 27: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:13:56,559 INFO L290 TraceCheckUtils]: 28: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:13:56,560 INFO L290 TraceCheckUtils]: 29: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(0 != ~compRegistered~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:13:56,560 INFO L290 TraceCheckUtils]: 30: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:13:56,560 INFO L290 TraceCheckUtils]: 31: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume 0 == ~tmp_ndt_6~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:13:56,561 INFO L290 TraceCheckUtils]: 32: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} ~returnVal2~0 := 0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:13:56,561 INFO L290 TraceCheckUtils]: 33: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~NP~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:13:56,561 INFO L290 TraceCheckUtils]: 34: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~MPR1~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:13:56,562 INFO L290 TraceCheckUtils]: 35: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~SKIP1~0); {6639#false} is VALID [2022-04-08 08:13:56,562 INFO L272 TraceCheckUtils]: 36: Hoare triple {6639#false} call errorFn(); {6639#false} is VALID [2022-04-08 08:13:56,562 INFO L290 TraceCheckUtils]: 37: Hoare triple {6639#false} assume !false; {6639#false} is VALID [2022-04-08 08:13:56,562 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:13:56,562 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:13:56,562 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1174901036] [2022-04-08 08:13:56,563 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1174901036] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:13:56,563 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:13:56,563 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-08 08:13:56,563 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:13:56,563 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1760576227] [2022-04-08 08:13:56,563 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1760576227] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:13:56,563 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:13:56,563 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-08 08:13:56,563 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1127655270] [2022-04-08 08:13:56,563 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:13:56,564 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-08 08:13:56,564 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:13:56,564 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:56,602 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 38 edges. 38 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:13:56,602 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-08 08:13:56,602 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:13:56,603 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-08 08:13:56,603 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-08 08:13:56,604 INFO L87 Difference]: Start difference. First operand 344 states and 466 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:58,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:13:58,018 INFO L93 Difference]: Finished difference Result 347 states and 468 transitions. [2022-04-08 08:13:58,018 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-08 08:13:58,018 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-08 08:13:58,020 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:13:58,020 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:58,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 338 transitions. [2022-04-08 08:13:58,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:58,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 338 transitions. [2022-04-08 08:13:58,026 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 338 transitions. [2022-04-08 08:13:58,358 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 338 edges. 338 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:13:58,365 INFO L225 Difference]: With dead ends: 347 [2022-04-08 08:13:58,365 INFO L226 Difference]: Without dead ends: 343 [2022-04-08 08:13:58,365 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-04-08 08:13:58,366 INFO L913 BasicCegarLoop]: 268 mSDtfsCounter, 187 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 593 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 421 SdHoareTripleChecker+Invalid, 628 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 593 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-04-08 08:13:58,366 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [187 Valid, 421 Invalid, 628 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 593 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-04-08 08:13:58,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-04-08 08:13:58,384 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2022-04-08 08:13:58,384 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:13:58,385 INFO L82 GeneralOperation]: Start isEquivalent. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 08:13:58,386 INFO L74 IsIncluded]: Start isIncluded. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 08:13:58,386 INFO L87 Difference]: Start difference. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 08:13:58,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:13:58,393 INFO L93 Difference]: Finished difference Result 343 states and 463 transitions. [2022-04-08 08:13:58,393 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-08 08:13:58,393 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:13:58,393 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:13:58,394 INFO L74 IsIncluded]: Start isIncluded. First operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 343 states. [2022-04-08 08:13:58,395 INFO L87 Difference]: Start difference. First operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 343 states. [2022-04-08 08:13:58,401 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:13:58,401 INFO L93 Difference]: Finished difference Result 343 states and 463 transitions. [2022-04-08 08:13:58,401 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-08 08:13:58,403 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:13:58,403 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:13:58,403 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:13:58,403 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:13:58,404 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 08:13:58,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 463 transitions. [2022-04-08 08:13:58,411 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 463 transitions. Word has length 38 [2022-04-08 08:13:58,411 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:13:58,411 INFO L478 AbstractCegarLoop]: Abstraction has 343 states and 463 transitions. [2022-04-08 08:13:58,412 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 08:13:58,412 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 343 states and 463 transitions. [2022-04-08 08:13:58,809 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 463 edges. 463 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:13:58,810 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-08 08:13:58,811 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-08 08:13:58,811 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:13:58,811 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:13:58,811 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-04-08 08:13:58,811 INFO L403 AbstractCegarLoop]: === Iteration 5 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:13:58,811 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:13:58,811 INFO L85 PathProgramCache]: Analyzing trace with hash 605107567, now seen corresponding path program 1 times [2022-04-08 08:13:58,812 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:13:58,812 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [327766546] [2022-04-08 08:13:58,812 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:13:58,812 INFO L85 PathProgramCache]: Analyzing trace with hash 605107567, now seen corresponding path program 2 times [2022-04-08 08:13:58,812 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:13:58,812 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1615168547] [2022-04-08 08:13:58,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:13:58,812 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:13:58,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:58,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:13:58,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:58,885 INFO L290 TraceCheckUtils]: 0: Hoare triple {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-08 08:13:58,885 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-08 08:13:58,885 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #783#return; {8724#true} is VALID [2022-04-08 08:13:58,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:13:58,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:58,906 INFO L290 TraceCheckUtils]: 0: Hoare triple {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-08 08:13:58,906 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-08 08:13:58,906 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #715#return; {8724#true} is VALID [2022-04-08 08:13:58,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:13:58,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:58,924 INFO L290 TraceCheckUtils]: 0: Hoare triple {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-08 08:13:58,924 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-08 08:13:58,924 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #717#return; {8724#true} is VALID [2022-04-08 08:13:58,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-08 08:13:58,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:13:58,945 INFO L290 TraceCheckUtils]: 0: Hoare triple {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {8724#true} is VALID [2022-04-08 08:13:58,946 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume !(0 != ~compRegistered~0); {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:58,946 INFO L290 TraceCheckUtils]: 2: Hoare triple {8749#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:58,946 INFO L290 TraceCheckUtils]: 3: Hoare triple {8749#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:58,947 INFO L290 TraceCheckUtils]: 4: Hoare triple {8749#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:58,947 INFO L290 TraceCheckUtils]: 5: Hoare triple {8749#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:58,947 INFO L290 TraceCheckUtils]: 6: Hoare triple {8749#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:58,948 INFO L290 TraceCheckUtils]: 7: Hoare triple {8749#(<= ~compRegistered~0 0)} assume true; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:58,948 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {8749#(<= ~compRegistered~0 0)} {8735#(= ~compRegistered~0 1)} #755#return; {8725#false} is VALID [2022-04-08 08:13:58,949 INFO L272 TraceCheckUtils]: 0: Hoare triple {8724#true} call ULTIMATE.init(); {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:13:58,950 INFO L290 TraceCheckUtils]: 1: Hoare triple {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-08 08:13:58,950 INFO L290 TraceCheckUtils]: 2: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-08 08:13:58,950 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {8724#true} {8724#true} #783#return; {8724#true} is VALID [2022-04-08 08:13:58,950 INFO L272 TraceCheckUtils]: 4: Hoare triple {8724#true} call #t~ret81 := main(); {8724#true} is VALID [2022-04-08 08:13:58,950 INFO L290 TraceCheckUtils]: 5: Hoare triple {8724#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {8724#true} is VALID [2022-04-08 08:13:58,960 INFO L272 TraceCheckUtils]: 6: Hoare triple {8724#true} call _BLAST_init(); {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:13:58,960 INFO L290 TraceCheckUtils]: 7: Hoare triple {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-08 08:13:58,960 INFO L290 TraceCheckUtils]: 8: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-08 08:13:58,960 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {8724#true} {8724#true} #715#return; {8724#true} is VALID [2022-04-08 08:13:58,961 INFO L290 TraceCheckUtils]: 10: Hoare triple {8724#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-08 08:13:58,961 INFO L290 TraceCheckUtils]: 11: Hoare triple {8724#true} assume !(0 == ~irp_choice~0); {8724#true} is VALID [2022-04-08 08:13:58,961 INFO L272 TraceCheckUtils]: 12: Hoare triple {8724#true} call stub_driver_init(); {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:13:58,961 INFO L290 TraceCheckUtils]: 13: Hoare triple {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-08 08:13:58,961 INFO L290 TraceCheckUtils]: 14: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-08 08:13:58,962 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {8724#true} {8724#true} #717#return; {8724#true} is VALID [2022-04-08 08:13:58,962 INFO L290 TraceCheckUtils]: 16: Hoare triple {8724#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {8724#true} is VALID [2022-04-08 08:13:58,962 INFO L290 TraceCheckUtils]: 17: Hoare triple {8724#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {8724#true} is VALID [2022-04-08 08:13:58,962 INFO L290 TraceCheckUtils]: 18: Hoare triple {8724#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {8724#true} is VALID [2022-04-08 08:13:58,962 INFO L290 TraceCheckUtils]: 19: Hoare triple {8724#true} assume 3 == ~tmp_ndt_3~0; {8724#true} is VALID [2022-04-08 08:13:58,962 INFO L272 TraceCheckUtils]: 20: Hoare triple {8724#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {8724#true} is VALID [2022-04-08 08:13:58,962 INFO L290 TraceCheckUtils]: 21: Hoare triple {8724#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {8724#true} is VALID [2022-04-08 08:13:58,962 INFO L290 TraceCheckUtils]: 22: Hoare triple {8724#true} assume 0 == ~irpStack__MinorFunction~0; {8724#true} is VALID [2022-04-08 08:13:58,962 INFO L290 TraceCheckUtils]: 23: Hoare triple {8724#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {8724#true} is VALID [2022-04-08 08:13:58,962 INFO L290 TraceCheckUtils]: 24: Hoare triple {8724#true} assume !(~s~0 != ~NP~0); {8724#true} is VALID [2022-04-08 08:13:58,963 INFO L290 TraceCheckUtils]: 25: Hoare triple {8724#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {8735#(= ~compRegistered~0 1)} is VALID [2022-04-08 08:13:58,963 INFO L290 TraceCheckUtils]: 26: Hoare triple {8735#(= ~compRegistered~0 1)} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {8735#(= ~compRegistered~0 1)} is VALID [2022-04-08 08:13:58,964 INFO L272 TraceCheckUtils]: 27: Hoare triple {8735#(= ~compRegistered~0 1)} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:13:58,964 INFO L290 TraceCheckUtils]: 28: Hoare triple {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {8724#true} is VALID [2022-04-08 08:13:58,964 INFO L290 TraceCheckUtils]: 29: Hoare triple {8724#true} assume !(0 != ~compRegistered~0); {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:58,964 INFO L290 TraceCheckUtils]: 30: Hoare triple {8749#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:58,965 INFO L290 TraceCheckUtils]: 31: Hoare triple {8749#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:58,965 INFO L290 TraceCheckUtils]: 32: Hoare triple {8749#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:58,965 INFO L290 TraceCheckUtils]: 33: Hoare triple {8749#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:58,965 INFO L290 TraceCheckUtils]: 34: Hoare triple {8749#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:58,966 INFO L290 TraceCheckUtils]: 35: Hoare triple {8749#(<= ~compRegistered~0 0)} assume true; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 08:13:58,966 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {8749#(<= ~compRegistered~0 0)} {8735#(= ~compRegistered~0 1)} #755#return; {8725#false} is VALID [2022-04-08 08:13:58,966 INFO L290 TraceCheckUtils]: 37: Hoare triple {8725#false} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {8725#false} is VALID [2022-04-08 08:13:58,966 INFO L290 TraceCheckUtils]: 38: Hoare triple {8725#false} assume 259 == ~__cil_tmp23~0; {8725#false} is VALID [2022-04-08 08:13:58,967 INFO L272 TraceCheckUtils]: 39: Hoare triple {8725#false} call #t~ret11 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {8725#false} is VALID [2022-04-08 08:13:58,967 INFO L290 TraceCheckUtils]: 40: Hoare triple {8725#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {8725#false} is VALID [2022-04-08 08:13:58,967 INFO L290 TraceCheckUtils]: 41: Hoare triple {8725#false} assume !(~s~0 == ~MPR3~0); {8725#false} is VALID [2022-04-08 08:13:58,967 INFO L290 TraceCheckUtils]: 42: Hoare triple {8725#false} assume !(1 == ~customIrp~0); {8725#false} is VALID [2022-04-08 08:13:58,967 INFO L290 TraceCheckUtils]: 43: Hoare triple {8725#false} assume ~s~0 == ~MPR3~0; {8725#false} is VALID [2022-04-08 08:13:58,967 INFO L272 TraceCheckUtils]: 44: Hoare triple {8725#false} call errorFn(); {8725#false} is VALID [2022-04-08 08:13:58,967 INFO L290 TraceCheckUtils]: 45: Hoare triple {8725#false} assume !false; {8725#false} is VALID [2022-04-08 08:13:58,967 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:13:58,968 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:13:58,968 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1615168547] [2022-04-08 08:13:58,968 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1615168547] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:13:58,968 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:13:58,968 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 08:13:58,968 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:13:58,968 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [327766546] [2022-04-08 08:13:58,968 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [327766546] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:13:58,968 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:13:58,968 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 08:13:58,968 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [832468714] [2022-04-08 08:13:58,968 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:13:58,969 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-08 08:13:58,969 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:13:58,969 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-08 08:13:58,995 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:13:58,995 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-08 08:13:58,995 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:13:58,995 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-08 08:13:58,996 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-04-08 08:13:58,996 INFO L87 Difference]: Start difference. First operand 343 states and 463 transitions. Second operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-08 08:14:00,400 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:00,400 INFO L93 Difference]: Finished difference Result 394 states and 520 transitions. [2022-04-08 08:14:00,400 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-08 08:14:00,400 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-08 08:14:00,400 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:00,401 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-08 08:14:00,404 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 425 transitions. [2022-04-08 08:14:00,404 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-08 08:14:00,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 425 transitions. [2022-04-08 08:14:00,407 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 425 transitions. [2022-04-08 08:14:00,738 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 425 edges. 425 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:00,744 INFO L225 Difference]: With dead ends: 394 [2022-04-08 08:14:00,744 INFO L226 Difference]: Without dead ends: 325 [2022-04-08 08:14:00,745 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-04-08 08:14:00,745 INFO L913 BasicCegarLoop]: 306 mSDtfsCounter, 607 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 351 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 607 SdHoareTripleChecker+Valid, 534 SdHoareTripleChecker+Invalid, 443 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 351 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:00,746 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [607 Valid, 534 Invalid, 443 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 351 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-08 08:14:00,746 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-08 08:14:00,840 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 304. [2022-04-08 08:14:00,841 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:00,841 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-08 08:14:00,842 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-08 08:14:00,842 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-08 08:14:00,848 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:00,848 INFO L93 Difference]: Finished difference Result 325 states and 431 transitions. [2022-04-08 08:14:00,848 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 431 transitions. [2022-04-08 08:14:00,849 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:00,849 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:00,850 INFO L74 IsIncluded]: Start isIncluded. First operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 325 states. [2022-04-08 08:14:00,850 INFO L87 Difference]: Start difference. First operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 325 states. [2022-04-08 08:14:00,856 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:00,856 INFO L93 Difference]: Finished difference Result 325 states and 431 transitions. [2022-04-08 08:14:00,856 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 431 transitions. [2022-04-08 08:14:00,857 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:00,857 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:00,857 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:00,857 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:00,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-08 08:14:00,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 406 transitions. [2022-04-08 08:14:00,864 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 406 transitions. Word has length 46 [2022-04-08 08:14:00,864 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:00,864 INFO L478 AbstractCegarLoop]: Abstraction has 304 states and 406 transitions. [2022-04-08 08:14:00,864 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-08 08:14:00,864 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 304 states and 406 transitions. [2022-04-08 08:14:01,245 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 406 edges. 406 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:01,245 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 406 transitions. [2022-04-08 08:14:01,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-04-08 08:14:01,246 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:01,246 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:01,246 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-04-08 08:14:01,246 INFO L403 AbstractCegarLoop]: === Iteration 6 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:01,246 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:01,246 INFO L85 PathProgramCache]: Analyzing trace with hash -447308474, now seen corresponding path program 1 times [2022-04-08 08:14:01,246 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:01,247 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1898540645] [2022-04-08 08:14:01,247 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:01,247 INFO L85 PathProgramCache]: Analyzing trace with hash -447308474, now seen corresponding path program 2 times [2022-04-08 08:14:01,247 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:01,247 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1725896008] [2022-04-08 08:14:01,247 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:01,247 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:01,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:01,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:01,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:01,363 INFO L290 TraceCheckUtils]: 0: Hoare triple {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {10808#true} is VALID [2022-04-08 08:14:01,363 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-08 08:14:01,363 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10808#true} {10808#true} #783#return; {10808#true} is VALID [2022-04-08 08:14:01,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:01,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:01,403 INFO L290 TraceCheckUtils]: 0: Hoare triple {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-08 08:14:01,403 INFO L290 TraceCheckUtils]: 1: Hoare triple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-08 08:14:01,404 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {10808#true} #715#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 08:14:01,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:01,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:01,421 INFO L290 TraceCheckUtils]: 0: Hoare triple {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10808#true} is VALID [2022-04-08 08:14:01,421 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-08 08:14:01,422 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10808#true} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #717#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 08:14:01,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-08 08:14:01,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:01,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-08 08:14:01,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:01,526 INFO L290 TraceCheckUtils]: 0: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-08 08:14:01,527 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 08:14:01,527 INFO L290 TraceCheckUtils]: 2: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 08:14:01,528 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 08:14:01,528 INFO L290 TraceCheckUtils]: 0: Hoare triple {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {10808#true} is VALID [2022-04-08 08:14:01,528 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {10808#true} is VALID [2022-04-08 08:14:01,528 INFO L290 TraceCheckUtils]: 2: Hoare triple {10808#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {10808#true} is VALID [2022-04-08 08:14:01,528 INFO L290 TraceCheckUtils]: 3: Hoare triple {10808#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {10808#true} is VALID [2022-04-08 08:14:01,529 INFO L272 TraceCheckUtils]: 4: Hoare triple {10808#true} call IofCompleteRequest(~Irp, 0); {10843#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:01,529 INFO L290 TraceCheckUtils]: 5: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-08 08:14:01,529 INFO L290 TraceCheckUtils]: 6: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 08:14:01,530 INFO L290 TraceCheckUtils]: 7: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 08:14:01,531 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 08:14:01,531 INFO L290 TraceCheckUtils]: 9: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 08:14:01,532 INFO L290 TraceCheckUtils]: 10: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 08:14:01,532 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #727#return; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-08 08:14:01,534 INFO L272 TraceCheckUtils]: 0: Hoare triple {10808#true} call ULTIMATE.init(); {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:01,534 INFO L290 TraceCheckUtils]: 1: Hoare triple {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {10808#true} is VALID [2022-04-08 08:14:01,534 INFO L290 TraceCheckUtils]: 2: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-08 08:14:01,534 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10808#true} {10808#true} #783#return; {10808#true} is VALID [2022-04-08 08:14:01,534 INFO L272 TraceCheckUtils]: 4: Hoare triple {10808#true} call #t~ret81 := main(); {10808#true} is VALID [2022-04-08 08:14:01,534 INFO L290 TraceCheckUtils]: 5: Hoare triple {10808#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {10808#true} is VALID [2022-04-08 08:14:01,535 INFO L272 TraceCheckUtils]: 6: Hoare triple {10808#true} call _BLAST_init(); {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:01,536 INFO L290 TraceCheckUtils]: 7: Hoare triple {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-08 08:14:01,536 INFO L290 TraceCheckUtils]: 8: Hoare triple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-08 08:14:01,537 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {10808#true} #715#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 08:14:01,539 INFO L290 TraceCheckUtils]: 10: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 08:14:01,541 INFO L290 TraceCheckUtils]: 11: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~irp_choice~0); {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 08:14:01,546 INFO L272 TraceCheckUtils]: 12: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call stub_driver_init(); {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:01,547 INFO L290 TraceCheckUtils]: 13: Hoare triple {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10808#true} is VALID [2022-04-08 08:14:01,547 INFO L290 TraceCheckUtils]: 14: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-08 08:14:01,548 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {10808#true} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #717#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 08:14:01,548 INFO L290 TraceCheckUtils]: 16: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 08:14:01,551 INFO L290 TraceCheckUtils]: 17: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 08:14:01,552 INFO L290 TraceCheckUtils]: 18: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 08:14:01,554 INFO L290 TraceCheckUtils]: 19: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 08:14:01,555 INFO L290 TraceCheckUtils]: 20: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 08:14:01,556 INFO L290 TraceCheckUtils]: 21: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume 8 == ~tmp_ndt_5~0; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 08:14:01,556 INFO L272 TraceCheckUtils]: 22: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:01,556 INFO L290 TraceCheckUtils]: 23: Hoare triple {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {10808#true} is VALID [2022-04-08 08:14:01,556 INFO L290 TraceCheckUtils]: 24: Hoare triple {10808#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {10808#true} is VALID [2022-04-08 08:14:01,557 INFO L290 TraceCheckUtils]: 25: Hoare triple {10808#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {10808#true} is VALID [2022-04-08 08:14:01,557 INFO L290 TraceCheckUtils]: 26: Hoare triple {10808#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {10808#true} is VALID [2022-04-08 08:14:01,557 INFO L272 TraceCheckUtils]: 27: Hoare triple {10808#true} call IofCompleteRequest(~Irp, 0); {10843#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:01,557 INFO L290 TraceCheckUtils]: 28: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-08 08:14:01,557 INFO L290 TraceCheckUtils]: 29: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 08:14:01,558 INFO L290 TraceCheckUtils]: 30: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 08:14:01,558 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 08:14:01,559 INFO L290 TraceCheckUtils]: 32: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 08:14:01,559 INFO L290 TraceCheckUtils]: 33: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 08:14:01,560 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #727#return; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-08 08:14:01,561 INFO L290 TraceCheckUtils]: 35: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-08 08:14:01,562 INFO L290 TraceCheckUtils]: 36: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-08 08:14:01,562 INFO L290 TraceCheckUtils]: 37: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-08 08:14:01,562 INFO L290 TraceCheckUtils]: 38: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume ~s~0 != ~UNLOADED~0; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-08 08:14:01,563 INFO L290 TraceCheckUtils]: 39: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -1 != ~status~1; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-08 08:14:01,563 INFO L290 TraceCheckUtils]: 40: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(~s~0 != ~SKIP2~0); {10809#false} is VALID [2022-04-08 08:14:01,563 INFO L290 TraceCheckUtils]: 41: Hoare triple {10809#false} assume 1 == ~pended~0; {10809#false} is VALID [2022-04-08 08:14:01,563 INFO L290 TraceCheckUtils]: 42: Hoare triple {10809#false} assume 259 != ~status~1; {10809#false} is VALID [2022-04-08 08:14:01,563 INFO L272 TraceCheckUtils]: 43: Hoare triple {10809#false} call errorFn(); {10809#false} is VALID [2022-04-08 08:14:01,563 INFO L290 TraceCheckUtils]: 44: Hoare triple {10809#false} assume !false; {10809#false} is VALID [2022-04-08 08:14:01,564 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:01,564 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:01,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1725896008] [2022-04-08 08:14:01,565 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1725896008] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:01,565 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:01,565 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 08:14:01,565 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:01,565 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1898540645] [2022-04-08 08:14:01,565 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1898540645] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:01,565 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:01,565 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 08:14:01,565 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1957246909] [2022-04-08 08:14:01,565 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:01,566 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-08 08:14:01,567 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:01,567 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:01,602 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:01,602 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-08 08:14:01,602 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:01,602 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-08 08:14:01,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-08 08:14:01,603 INFO L87 Difference]: Start difference. First operand 304 states and 406 transitions. Second operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:04,595 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:04,595 INFO L93 Difference]: Finished difference Result 334 states and 440 transitions. [2022-04-08 08:14:04,595 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-08 08:14:04,595 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-08 08:14:04,595 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:04,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:04,598 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 365 transitions. [2022-04-08 08:14:04,598 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:04,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 365 transitions. [2022-04-08 08:14:04,600 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 365 transitions. [2022-04-08 08:14:04,943 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:04,948 INFO L225 Difference]: With dead ends: 334 [2022-04-08 08:14:04,949 INFO L226 Difference]: Without dead ends: 325 [2022-04-08 08:14:04,949 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-08 08:14:04,950 INFO L913 BasicCegarLoop]: 255 mSDtfsCounter, 770 mSDsluCounter, 324 mSDsCounter, 0 mSdLazyCounter, 918 mSolverCounterSat, 150 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 772 SdHoareTripleChecker+Valid, 579 SdHoareTripleChecker+Invalid, 1068 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 150 IncrementalHoareTripleChecker+Valid, 918 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:04,950 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [772 Valid, 579 Invalid, 1068 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [150 Valid, 918 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-04-08 08:14:04,950 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-08 08:14:05,226 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 320. [2022-04-08 08:14:05,226 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:05,229 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 08:14:05,233 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 08:14:05,233 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 08:14:05,241 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:05,241 INFO L93 Difference]: Finished difference Result 325 states and 429 transitions. [2022-04-08 08:14:05,241 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 429 transitions. [2022-04-08 08:14:05,242 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:05,242 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:05,242 INFO L74 IsIncluded]: Start isIncluded. First operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-08 08:14:05,243 INFO L87 Difference]: Start difference. First operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-08 08:14:05,248 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:05,248 INFO L93 Difference]: Finished difference Result 325 states and 429 transitions. [2022-04-08 08:14:05,248 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 429 transitions. [2022-04-08 08:14:05,249 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:05,249 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:05,249 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:05,249 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:05,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 08:14:05,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 425 transitions. [2022-04-08 08:14:05,256 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 425 transitions. Word has length 45 [2022-04-08 08:14:05,256 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:05,256 INFO L478 AbstractCegarLoop]: Abstraction has 320 states and 425 transitions. [2022-04-08 08:14:05,256 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:05,257 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 320 states and 425 transitions. [2022-04-08 08:14:05,699 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 425 edges. 425 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:05,699 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 425 transitions. [2022-04-08 08:14:05,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-08 08:14:05,700 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:05,700 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:05,700 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-04-08 08:14:05,701 INFO L403 AbstractCegarLoop]: === Iteration 7 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:05,701 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:05,701 INFO L85 PathProgramCache]: Analyzing trace with hash -1360970565, now seen corresponding path program 1 times [2022-04-08 08:14:05,701 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:05,701 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [106651768] [2022-04-08 08:14:05,701 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:05,701 INFO L85 PathProgramCache]: Analyzing trace with hash -1360970565, now seen corresponding path program 2 times [2022-04-08 08:14:05,701 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:05,702 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1459140209] [2022-04-08 08:14:05,702 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:05,702 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:05,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:05,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:05,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:05,814 INFO L290 TraceCheckUtils]: 0: Hoare triple {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12822#true} is VALID [2022-04-08 08:14:05,815 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-08 08:14:05,815 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12822#true} {12822#true} #783#return; {12822#true} is VALID [2022-04-08 08:14:05,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:05,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:05,865 INFO L290 TraceCheckUtils]: 0: Hoare triple {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-08 08:14:05,865 INFO L290 TraceCheckUtils]: 1: Hoare triple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-08 08:14:05,866 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {12822#true} #715#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:05,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:05,895 INFO L290 TraceCheckUtils]: 0: Hoare triple {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12822#true} is VALID [2022-04-08 08:14:05,895 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-08 08:14:05,895 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12822#true} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #717#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-08 08:14:05,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:05,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-08 08:14:05,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:05,972 INFO L290 TraceCheckUtils]: 0: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-08 08:14:05,973 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 08:14:05,973 INFO L290 TraceCheckUtils]: 2: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 08:14:05,973 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 08:14:05,974 INFO L290 TraceCheckUtils]: 0: Hoare triple {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {12822#true} is VALID [2022-04-08 08:14:05,974 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {12822#true} is VALID [2022-04-08 08:14:05,974 INFO L290 TraceCheckUtils]: 2: Hoare triple {12822#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {12822#true} is VALID [2022-04-08 08:14:05,974 INFO L290 TraceCheckUtils]: 3: Hoare triple {12822#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {12822#true} is VALID [2022-04-08 08:14:05,976 INFO L272 TraceCheckUtils]: 4: Hoare triple {12822#true} call IofCompleteRequest(~Irp, 0); {12857#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:05,976 INFO L290 TraceCheckUtils]: 5: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-08 08:14:05,977 INFO L290 TraceCheckUtils]: 6: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 08:14:05,977 INFO L290 TraceCheckUtils]: 7: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 08:14:05,978 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 08:14:05,979 INFO L290 TraceCheckUtils]: 9: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 08:14:05,980 INFO L290 TraceCheckUtils]: 10: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 08:14:05,981 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #727#return; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,982 INFO L272 TraceCheckUtils]: 0: Hoare triple {12822#true} call ULTIMATE.init(); {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:05,982 INFO L290 TraceCheckUtils]: 1: Hoare triple {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12822#true} is VALID [2022-04-08 08:14:05,982 INFO L290 TraceCheckUtils]: 2: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-08 08:14:05,982 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12822#true} {12822#true} #783#return; {12822#true} is VALID [2022-04-08 08:14:05,982 INFO L272 TraceCheckUtils]: 4: Hoare triple {12822#true} call #t~ret81 := main(); {12822#true} is VALID [2022-04-08 08:14:05,982 INFO L290 TraceCheckUtils]: 5: Hoare triple {12822#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {12822#true} is VALID [2022-04-08 08:14:05,983 INFO L272 TraceCheckUtils]: 6: Hoare triple {12822#true} call _BLAST_init(); {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:05,984 INFO L290 TraceCheckUtils]: 7: Hoare triple {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-08 08:14:05,984 INFO L290 TraceCheckUtils]: 8: Hoare triple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-08 08:14:05,984 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {12822#true} #715#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,985 INFO L290 TraceCheckUtils]: 10: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,985 INFO L290 TraceCheckUtils]: 11: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~irp_choice~0); {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,986 INFO L272 TraceCheckUtils]: 12: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call stub_driver_init(); {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:05,986 INFO L290 TraceCheckUtils]: 13: Hoare triple {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12822#true} is VALID [2022-04-08 08:14:05,986 INFO L290 TraceCheckUtils]: 14: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-08 08:14:05,986 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {12822#true} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #717#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,987 INFO L290 TraceCheckUtils]: 16: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,987 INFO L290 TraceCheckUtils]: 17: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,988 INFO L290 TraceCheckUtils]: 18: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,988 INFO L290 TraceCheckUtils]: 19: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,988 INFO L290 TraceCheckUtils]: 20: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,993 INFO L290 TraceCheckUtils]: 21: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume 8 == ~tmp_ndt_5~0; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,994 INFO L272 TraceCheckUtils]: 22: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:05,994 INFO L290 TraceCheckUtils]: 23: Hoare triple {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {12822#true} is VALID [2022-04-08 08:14:05,994 INFO L290 TraceCheckUtils]: 24: Hoare triple {12822#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {12822#true} is VALID [2022-04-08 08:14:05,994 INFO L290 TraceCheckUtils]: 25: Hoare triple {12822#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {12822#true} is VALID [2022-04-08 08:14:05,994 INFO L290 TraceCheckUtils]: 26: Hoare triple {12822#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {12822#true} is VALID [2022-04-08 08:14:05,995 INFO L272 TraceCheckUtils]: 27: Hoare triple {12822#true} call IofCompleteRequest(~Irp, 0); {12857#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:05,995 INFO L290 TraceCheckUtils]: 28: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-08 08:14:05,995 INFO L290 TraceCheckUtils]: 29: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 08:14:05,996 INFO L290 TraceCheckUtils]: 30: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 08:14:05,996 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 08:14:05,997 INFO L290 TraceCheckUtils]: 32: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 08:14:05,997 INFO L290 TraceCheckUtils]: 33: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 08:14:05,998 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #727#return; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,998 INFO L290 TraceCheckUtils]: 35: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,999 INFO L290 TraceCheckUtils]: 36: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:05,999 INFO L290 TraceCheckUtils]: 37: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:06,000 INFO L290 TraceCheckUtils]: 38: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~UNLOADED~0; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:06,002 INFO L290 TraceCheckUtils]: 39: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -1 != ~status~1; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:06,002 INFO L290 TraceCheckUtils]: 40: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~SKIP2~0; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 08:14:06,002 INFO L290 TraceCheckUtils]: 41: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(~s~0 != ~IPC~0); {12823#false} is VALID [2022-04-08 08:14:06,003 INFO L290 TraceCheckUtils]: 42: Hoare triple {12823#false} assume 1 == ~pended~0; {12823#false} is VALID [2022-04-08 08:14:06,003 INFO L290 TraceCheckUtils]: 43: Hoare triple {12823#false} assume 259 != ~status~1; {12823#false} is VALID [2022-04-08 08:14:06,003 INFO L272 TraceCheckUtils]: 44: Hoare triple {12823#false} call errorFn(); {12823#false} is VALID [2022-04-08 08:14:06,003 INFO L290 TraceCheckUtils]: 45: Hoare triple {12823#false} assume !false; {12823#false} is VALID [2022-04-08 08:14:06,003 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:06,003 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:06,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1459140209] [2022-04-08 08:14:06,003 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1459140209] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:06,003 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:06,004 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 08:14:06,004 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:06,004 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [106651768] [2022-04-08 08:14:06,004 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [106651768] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:06,004 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:06,004 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 08:14:06,004 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1141174438] [2022-04-08 08:14:06,004 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:06,004 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-08 08:14:06,005 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:06,005 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:06,037 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:06,038 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-08 08:14:06,038 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:06,039 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-08 08:14:06,039 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-08 08:14:06,039 INFO L87 Difference]: Start difference. First operand 320 states and 425 transitions. Second operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:08,833 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:08,833 INFO L93 Difference]: Finished difference Result 330 states and 433 transitions. [2022-04-08 08:14:08,833 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-08 08:14:08,833 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-08 08:14:08,833 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:08,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:08,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 358 transitions. [2022-04-08 08:14:08,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:08,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 358 transitions. [2022-04-08 08:14:08,838 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 358 transitions. [2022-04-08 08:14:09,189 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 358 edges. 358 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:09,194 INFO L225 Difference]: With dead ends: 330 [2022-04-08 08:14:09,194 INFO L226 Difference]: Without dead ends: 325 [2022-04-08 08:14:09,195 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-08 08:14:09,195 INFO L913 BasicCegarLoop]: 256 mSDtfsCounter, 521 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 824 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 523 SdHoareTripleChecker+Valid, 533 SdHoareTripleChecker+Invalid, 916 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 824 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:09,195 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [523 Valid, 533 Invalid, 916 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 824 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-04-08 08:14:09,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-08 08:14:09,577 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 320. [2022-04-08 08:14:09,577 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:09,578 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 08:14:09,579 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 08:14:09,579 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 08:14:09,584 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:09,584 INFO L93 Difference]: Finished difference Result 325 states and 428 transitions. [2022-04-08 08:14:09,584 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 428 transitions. [2022-04-08 08:14:09,585 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:09,585 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:09,586 INFO L74 IsIncluded]: Start isIncluded. First operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-08 08:14:09,586 INFO L87 Difference]: Start difference. First operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-08 08:14:09,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:09,592 INFO L93 Difference]: Finished difference Result 325 states and 428 transitions. [2022-04-08 08:14:09,592 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 428 transitions. [2022-04-08 08:14:09,592 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:09,592 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:09,592 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:09,592 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:09,593 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 08:14:09,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 424 transitions. [2022-04-08 08:14:09,599 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 424 transitions. Word has length 46 [2022-04-08 08:14:09,599 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:09,599 INFO L478 AbstractCegarLoop]: Abstraction has 320 states and 424 transitions. [2022-04-08 08:14:09,600 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:09,600 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 320 states and 424 transitions. [2022-04-08 08:14:10,046 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 424 edges. 424 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:10,046 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 424 transitions. [2022-04-08 08:14:10,047 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-04-08 08:14:10,047 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:10,047 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:10,047 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-04-08 08:14:10,047 INFO L403 AbstractCegarLoop]: === Iteration 8 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:10,048 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:10,048 INFO L85 PathProgramCache]: Analyzing trace with hash 548356508, now seen corresponding path program 1 times [2022-04-08 08:14:10,048 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:10,048 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1134239637] [2022-04-08 08:14:10,048 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:10,048 INFO L85 PathProgramCache]: Analyzing trace with hash 548356508, now seen corresponding path program 2 times [2022-04-08 08:14:10,048 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:10,048 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1867552571] [2022-04-08 08:14:10,048 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:10,049 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:10,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:10,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:10,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:10,153 INFO L290 TraceCheckUtils]: 0: Hoare triple {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-08 08:14:10,153 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 08:14:10,154 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #783#return; {14828#true} is VALID [2022-04-08 08:14:10,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:10,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:10,181 INFO L290 TraceCheckUtils]: 0: Hoare triple {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-08 08:14:10,181 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 08:14:10,181 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #715#return; {14828#true} is VALID [2022-04-08 08:14:10,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:10,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:10,196 INFO L290 TraceCheckUtils]: 0: Hoare triple {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-08 08:14:10,197 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 08:14:10,197 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #717#return; {14828#true} is VALID [2022-04-08 08:14:10,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-08 08:14:10,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:10,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-08 08:14:10,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:10,234 INFO L290 TraceCheckUtils]: 0: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-08 08:14:10,235 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-08 08:14:10,235 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 08:14:10,235 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-08 08:14:10,235 INFO L290 TraceCheckUtils]: 0: Hoare triple {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {14828#true} is VALID [2022-04-08 08:14:10,235 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {14828#true} is VALID [2022-04-08 08:14:10,235 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {14828#true} is VALID [2022-04-08 08:14:10,235 INFO L290 TraceCheckUtils]: 3: Hoare triple {14828#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {14828#true} is VALID [2022-04-08 08:14:10,236 INFO L272 TraceCheckUtils]: 4: Hoare triple {14828#true} call IofCompleteRequest(~Irp, 0); {14860#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:10,236 INFO L290 TraceCheckUtils]: 5: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-08 08:14:10,236 INFO L290 TraceCheckUtils]: 6: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-08 08:14:10,236 INFO L290 TraceCheckUtils]: 7: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 08:14:10,239 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-08 08:14:10,240 INFO L290 TraceCheckUtils]: 9: Hoare triple {14828#true} #res := ~status~3; {14828#true} is VALID [2022-04-08 08:14:10,241 INFO L290 TraceCheckUtils]: 10: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 08:14:10,241 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {14828#true} {14828#true} #727#return; {14828#true} is VALID [2022-04-08 08:14:10,242 INFO L272 TraceCheckUtils]: 0: Hoare triple {14828#true} call ULTIMATE.init(); {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:10,242 INFO L290 TraceCheckUtils]: 1: Hoare triple {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-08 08:14:10,243 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 08:14:10,243 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14828#true} {14828#true} #783#return; {14828#true} is VALID [2022-04-08 08:14:10,243 INFO L272 TraceCheckUtils]: 4: Hoare triple {14828#true} call #t~ret81 := main(); {14828#true} is VALID [2022-04-08 08:14:10,243 INFO L290 TraceCheckUtils]: 5: Hoare triple {14828#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {14828#true} is VALID [2022-04-08 08:14:10,244 INFO L272 TraceCheckUtils]: 6: Hoare triple {14828#true} call _BLAST_init(); {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:10,244 INFO L290 TraceCheckUtils]: 7: Hoare triple {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-08 08:14:10,244 INFO L290 TraceCheckUtils]: 8: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 08:14:10,244 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {14828#true} {14828#true} #715#return; {14828#true} is VALID [2022-04-08 08:14:10,244 INFO L290 TraceCheckUtils]: 10: Hoare triple {14828#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-08 08:14:10,244 INFO L290 TraceCheckUtils]: 11: Hoare triple {14828#true} assume !(0 == ~irp_choice~0); {14828#true} is VALID [2022-04-08 08:14:10,245 INFO L272 TraceCheckUtils]: 12: Hoare triple {14828#true} call stub_driver_init(); {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:10,245 INFO L290 TraceCheckUtils]: 13: Hoare triple {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-08 08:14:10,245 INFO L290 TraceCheckUtils]: 14: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 08:14:10,245 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {14828#true} {14828#true} #717#return; {14828#true} is VALID [2022-04-08 08:14:10,245 INFO L290 TraceCheckUtils]: 16: Hoare triple {14828#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {14828#true} is VALID [2022-04-08 08:14:10,245 INFO L290 TraceCheckUtils]: 17: Hoare triple {14828#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {14828#true} is VALID [2022-04-08 08:14:10,245 INFO L290 TraceCheckUtils]: 18: Hoare triple {14828#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {14828#true} is VALID [2022-04-08 08:14:10,248 INFO L290 TraceCheckUtils]: 19: Hoare triple {14828#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {14828#true} is VALID [2022-04-08 08:14:10,248 INFO L290 TraceCheckUtils]: 20: Hoare triple {14828#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {14828#true} is VALID [2022-04-08 08:14:10,248 INFO L290 TraceCheckUtils]: 21: Hoare triple {14828#true} assume 8 == ~tmp_ndt_5~0; {14828#true} is VALID [2022-04-08 08:14:10,249 INFO L272 TraceCheckUtils]: 22: Hoare triple {14828#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:10,249 INFO L290 TraceCheckUtils]: 23: Hoare triple {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {14828#true} is VALID [2022-04-08 08:14:10,249 INFO L290 TraceCheckUtils]: 24: Hoare triple {14828#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {14828#true} is VALID [2022-04-08 08:14:10,249 INFO L290 TraceCheckUtils]: 25: Hoare triple {14828#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {14828#true} is VALID [2022-04-08 08:14:10,250 INFO L290 TraceCheckUtils]: 26: Hoare triple {14828#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {14828#true} is VALID [2022-04-08 08:14:10,250 INFO L272 TraceCheckUtils]: 27: Hoare triple {14828#true} call IofCompleteRequest(~Irp, 0); {14860#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:10,250 INFO L290 TraceCheckUtils]: 28: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-08 08:14:10,250 INFO L290 TraceCheckUtils]: 29: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-08 08:14:10,250 INFO L290 TraceCheckUtils]: 30: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 08:14:10,250 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-08 08:14:10,250 INFO L290 TraceCheckUtils]: 32: Hoare triple {14828#true} #res := ~status~3; {14828#true} is VALID [2022-04-08 08:14:10,250 INFO L290 TraceCheckUtils]: 33: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 08:14:10,250 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {14828#true} {14828#true} #727#return; {14828#true} is VALID [2022-04-08 08:14:10,251 INFO L290 TraceCheckUtils]: 35: Hoare triple {14828#true} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {14828#true} is VALID [2022-04-08 08:14:10,251 INFO L290 TraceCheckUtils]: 36: Hoare triple {14828#true} assume !(1 == ~pended~0); {14851#(not (= ~pended~0 1))} is VALID [2022-04-08 08:14:10,251 INFO L290 TraceCheckUtils]: 37: Hoare triple {14851#(not (= ~pended~0 1))} assume !(1 == ~pended~0); {14851#(not (= ~pended~0 1))} is VALID [2022-04-08 08:14:10,251 INFO L290 TraceCheckUtils]: 38: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~UNLOADED~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-08 08:14:10,252 INFO L290 TraceCheckUtils]: 39: Hoare triple {14851#(not (= ~pended~0 1))} assume -1 != ~status~1; {14851#(not (= ~pended~0 1))} is VALID [2022-04-08 08:14:10,252 INFO L290 TraceCheckUtils]: 40: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~SKIP2~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-08 08:14:10,252 INFO L290 TraceCheckUtils]: 41: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~IPC~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-08 08:14:10,253 INFO L290 TraceCheckUtils]: 42: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 == ~DC~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-08 08:14:10,253 INFO L290 TraceCheckUtils]: 43: Hoare triple {14851#(not (= ~pended~0 1))} assume 1 == ~pended~0; {14829#false} is VALID [2022-04-08 08:14:10,253 INFO L290 TraceCheckUtils]: 44: Hoare triple {14829#false} assume 259 != ~status~1; {14829#false} is VALID [2022-04-08 08:14:10,253 INFO L272 TraceCheckUtils]: 45: Hoare triple {14829#false} call errorFn(); {14829#false} is VALID [2022-04-08 08:14:10,253 INFO L290 TraceCheckUtils]: 46: Hoare triple {14829#false} assume !false; {14829#false} is VALID [2022-04-08 08:14:10,253 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:10,253 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:10,253 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1867552571] [2022-04-08 08:14:10,254 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1867552571] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:10,254 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:10,254 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 08:14:10,254 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:10,254 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1134239637] [2022-04-08 08:14:10,254 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1134239637] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:10,254 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:10,254 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 08:14:10,254 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1177968273] [2022-04-08 08:14:10,254 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:10,255 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-08 08:14:10,255 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:10,256 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:10,284 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:10,284 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-08 08:14:10,285 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:10,285 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-08 08:14:10,285 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-04-08 08:14:10,285 INFO L87 Difference]: Start difference. First operand 320 states and 424 transitions. Second operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:12,073 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:12,074 INFO L93 Difference]: Finished difference Result 338 states and 446 transitions. [2022-04-08 08:14:12,074 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-08 08:14:12,074 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-08 08:14:12,074 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:12,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:12,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 346 transitions. [2022-04-08 08:14:12,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:12,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 346 transitions. [2022-04-08 08:14:12,079 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 346 transitions. [2022-04-08 08:14:12,415 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 346 edges. 346 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:12,419 INFO L225 Difference]: With dead ends: 338 [2022-04-08 08:14:12,419 INFO L226 Difference]: Without dead ends: 272 [2022-04-08 08:14:12,420 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=49, Invalid=83, Unknown=0, NotChecked=0, Total=132 [2022-04-08 08:14:12,420 INFO L913 BasicCegarLoop]: 250 mSDtfsCounter, 724 mSDsluCounter, 177 mSDsCounter, 0 mSdLazyCounter, 415 mSolverCounterSat, 119 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 724 SdHoareTripleChecker+Valid, 427 SdHoareTripleChecker+Invalid, 534 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 119 IncrementalHoareTripleChecker+Valid, 415 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:12,420 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [724 Valid, 427 Invalid, 534 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [119 Valid, 415 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-08 08:14:12,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2022-04-08 08:14:12,717 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 242. [2022-04-08 08:14:12,717 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:12,717 INFO L82 GeneralOperation]: Start isEquivalent. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:12,718 INFO L74 IsIncluded]: Start isIncluded. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:12,718 INFO L87 Difference]: Start difference. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:12,722 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:12,723 INFO L93 Difference]: Finished difference Result 272 states and 356 transitions. [2022-04-08 08:14:12,723 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 356 transitions. [2022-04-08 08:14:12,726 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:12,726 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:12,728 INFO L74 IsIncluded]: Start isIncluded. First operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 272 states. [2022-04-08 08:14:12,728 INFO L87 Difference]: Start difference. First operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 272 states. [2022-04-08 08:14:12,732 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:12,732 INFO L93 Difference]: Finished difference Result 272 states and 356 transitions. [2022-04-08 08:14:12,732 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 356 transitions. [2022-04-08 08:14:12,733 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:12,733 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:12,733 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:12,733 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:12,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:12,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 321 transitions. [2022-04-08 08:14:12,737 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 321 transitions. Word has length 47 [2022-04-08 08:14:12,737 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:12,737 INFO L478 AbstractCegarLoop]: Abstraction has 242 states and 321 transitions. [2022-04-08 08:14:12,738 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:12,738 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 242 states and 321 transitions. [2022-04-08 08:14:13,070 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 321 edges. 321 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:13,070 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 321 transitions. [2022-04-08 08:14:13,071 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-08 08:14:13,071 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:13,071 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:13,071 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-04-08 08:14:13,071 INFO L403 AbstractCegarLoop]: === Iteration 9 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:13,071 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:13,071 INFO L85 PathProgramCache]: Analyzing trace with hash 916659597, now seen corresponding path program 1 times [2022-04-08 08:14:13,071 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:13,071 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1008320216] [2022-04-08 08:14:13,072 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:13,072 INFO L85 PathProgramCache]: Analyzing trace with hash 916659597, now seen corresponding path program 2 times [2022-04-08 08:14:13,072 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:13,072 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1539492091] [2022-04-08 08:14:13,072 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:13,072 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:13,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:13,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:13,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:13,166 INFO L290 TraceCheckUtils]: 0: Hoare triple {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-08 08:14:13,166 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 08:14:13,166 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #783#return; {16577#true} is VALID [2022-04-08 08:14:13,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:13,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:13,190 INFO L290 TraceCheckUtils]: 0: Hoare triple {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-08 08:14:13,191 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 08:14:13,191 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #715#return; {16577#true} is VALID [2022-04-08 08:14:13,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:13,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:13,204 INFO L290 TraceCheckUtils]: 0: Hoare triple {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-08 08:14:13,204 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 08:14:13,204 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #717#return; {16577#true} is VALID [2022-04-08 08:14:13,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-04-08 08:14:13,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:13,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-08 08:14:13,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:13,220 INFO L290 TraceCheckUtils]: 0: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-08 08:14:13,220 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 08:14:13,220 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-08 08:14:13,220 INFO L290 TraceCheckUtils]: 0: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16577#true} is VALID [2022-04-08 08:14:13,221 INFO L272 TraceCheckUtils]: 1: Hoare triple {16577#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:13,221 INFO L290 TraceCheckUtils]: 2: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-08 08:14:13,221 INFO L290 TraceCheckUtils]: 3: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 08:14:13,221 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-08 08:14:13,221 INFO L290 TraceCheckUtils]: 5: Hoare triple {16577#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {16577#true} is VALID [2022-04-08 08:14:13,221 INFO L290 TraceCheckUtils]: 6: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 08:14:13,221 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {16577#true} {16577#true} #777#return; {16577#true} is VALID [2022-04-08 08:14:13,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-04-08 08:14:13,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:13,242 INFO L290 TraceCheckUtils]: 0: Hoare triple {16607#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 08:14:13,242 INFO L290 TraceCheckUtils]: 1: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 08:14:13,243 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {16577#true} #779#return; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 08:14:13,244 INFO L272 TraceCheckUtils]: 0: Hoare triple {16577#true} call ULTIMATE.init(); {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:13,244 INFO L290 TraceCheckUtils]: 1: Hoare triple {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-08 08:14:13,244 INFO L290 TraceCheckUtils]: 2: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 08:14:13,244 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {16577#true} {16577#true} #783#return; {16577#true} is VALID [2022-04-08 08:14:13,244 INFO L272 TraceCheckUtils]: 4: Hoare triple {16577#true} call #t~ret81 := main(); {16577#true} is VALID [2022-04-08 08:14:13,244 INFO L290 TraceCheckUtils]: 5: Hoare triple {16577#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {16577#true} is VALID [2022-04-08 08:14:13,245 INFO L272 TraceCheckUtils]: 6: Hoare triple {16577#true} call _BLAST_init(); {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:13,245 INFO L290 TraceCheckUtils]: 7: Hoare triple {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-08 08:14:13,245 INFO L290 TraceCheckUtils]: 8: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 08:14:13,245 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {16577#true} {16577#true} #715#return; {16577#true} is VALID [2022-04-08 08:14:13,245 INFO L290 TraceCheckUtils]: 10: Hoare triple {16577#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-08 08:14:13,245 INFO L290 TraceCheckUtils]: 11: Hoare triple {16577#true} assume !(0 == ~irp_choice~0); {16577#true} is VALID [2022-04-08 08:14:13,246 INFO L272 TraceCheckUtils]: 12: Hoare triple {16577#true} call stub_driver_init(); {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:13,246 INFO L290 TraceCheckUtils]: 13: Hoare triple {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-08 08:14:13,246 INFO L290 TraceCheckUtils]: 14: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 08:14:13,246 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16577#true} {16577#true} #717#return; {16577#true} is VALID [2022-04-08 08:14:13,246 INFO L290 TraceCheckUtils]: 16: Hoare triple {16577#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {16577#true} is VALID [2022-04-08 08:14:13,246 INFO L290 TraceCheckUtils]: 17: Hoare triple {16577#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {16577#true} is VALID [2022-04-08 08:14:13,246 INFO L290 TraceCheckUtils]: 18: Hoare triple {16577#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {16577#true} is VALID [2022-04-08 08:14:13,246 INFO L290 TraceCheckUtils]: 19: Hoare triple {16577#true} assume 3 == ~tmp_ndt_3~0; {16577#true} is VALID [2022-04-08 08:14:13,247 INFO L272 TraceCheckUtils]: 20: Hoare triple {16577#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {16577#true} is VALID [2022-04-08 08:14:13,247 INFO L290 TraceCheckUtils]: 21: Hoare triple {16577#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {16577#true} is VALID [2022-04-08 08:14:13,248 INFO L290 TraceCheckUtils]: 22: Hoare triple {16577#true} assume 0 == ~irpStack__MinorFunction~0; {16577#true} is VALID [2022-04-08 08:14:13,248 INFO L290 TraceCheckUtils]: 23: Hoare triple {16577#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {16577#true} is VALID [2022-04-08 08:14:13,248 INFO L290 TraceCheckUtils]: 24: Hoare triple {16577#true} assume !(~s~0 != ~NP~0); {16577#true} is VALID [2022-04-08 08:14:13,248 INFO L290 TraceCheckUtils]: 25: Hoare triple {16577#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {16577#true} is VALID [2022-04-08 08:14:13,248 INFO L290 TraceCheckUtils]: 26: Hoare triple {16577#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {16577#true} is VALID [2022-04-08 08:14:13,248 INFO L272 TraceCheckUtils]: 27: Hoare triple {16577#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {16577#true} is VALID [2022-04-08 08:14:13,248 INFO L290 TraceCheckUtils]: 28: Hoare triple {16577#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {16577#true} is VALID [2022-04-08 08:14:13,248 INFO L290 TraceCheckUtils]: 29: Hoare triple {16577#true} assume 0 != ~compRegistered~0; {16577#true} is VALID [2022-04-08 08:14:13,249 INFO L272 TraceCheckUtils]: 30: Hoare triple {16577#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:13,249 INFO L290 TraceCheckUtils]: 31: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16577#true} is VALID [2022-04-08 08:14:13,249 INFO L272 TraceCheckUtils]: 32: Hoare triple {16577#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:13,249 INFO L290 TraceCheckUtils]: 33: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-08 08:14:13,249 INFO L290 TraceCheckUtils]: 34: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 08:14:13,249 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-08 08:14:13,250 INFO L290 TraceCheckUtils]: 36: Hoare triple {16577#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {16577#true} is VALID [2022-04-08 08:14:13,250 INFO L290 TraceCheckUtils]: 37: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 08:14:13,250 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {16577#true} {16577#true} #777#return; {16577#true} is VALID [2022-04-08 08:14:13,250 INFO L290 TraceCheckUtils]: 39: Hoare triple {16577#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {16577#true} is VALID [2022-04-08 08:14:13,250 INFO L290 TraceCheckUtils]: 40: Hoare triple {16577#true} assume -1073741802 == ~__cil_tmp7~0; {16577#true} is VALID [2022-04-08 08:14:13,250 INFO L272 TraceCheckUtils]: 41: Hoare triple {16577#true} call stubMoreProcessingRequired(); {16607#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:13,250 INFO L290 TraceCheckUtils]: 42: Hoare triple {16607#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 08:14:13,251 INFO L290 TraceCheckUtils]: 43: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 08:14:13,251 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {16577#true} #779#return; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 08:14:13,251 INFO L290 TraceCheckUtils]: 45: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 08:14:13,252 INFO L290 TraceCheckUtils]: 46: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume 0 == ~tmp_ndt_6~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 08:14:13,252 INFO L290 TraceCheckUtils]: 47: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} ~returnVal2~0 := 0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 08:14:13,252 INFO L290 TraceCheckUtils]: 48: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~NP~0); {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 08:14:13,253 INFO L290 TraceCheckUtils]: 49: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~MPR1~0); {16578#false} is VALID [2022-04-08 08:14:13,253 INFO L290 TraceCheckUtils]: 50: Hoare triple {16578#false} assume !(~s~0 == ~SKIP1~0); {16578#false} is VALID [2022-04-08 08:14:13,253 INFO L272 TraceCheckUtils]: 51: Hoare triple {16578#false} call errorFn(); {16578#false} is VALID [2022-04-08 08:14:13,253 INFO L290 TraceCheckUtils]: 52: Hoare triple {16578#false} assume !false; {16578#false} is VALID [2022-04-08 08:14:13,254 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:13,254 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:13,254 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1539492091] [2022-04-08 08:14:13,254 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1539492091] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:13,254 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:13,254 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 08:14:13,254 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:13,254 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1008320216] [2022-04-08 08:14:13,254 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1008320216] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:13,254 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:13,255 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 08:14:13,255 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1308565816] [2022-04-08 08:14:13,255 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:13,256 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-08 08:14:13,256 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:13,256 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:13,284 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:13,284 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-08 08:14:13,284 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:13,285 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-08 08:14:13,285 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-04-08 08:14:13,286 INFO L87 Difference]: Start difference. First operand 242 states and 321 transitions. Second operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:14,708 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:14,708 INFO L93 Difference]: Finished difference Result 270 states and 354 transitions. [2022-04-08 08:14:14,708 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-08 08:14:14,708 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-08 08:14:14,708 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:14,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:14,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 341 transitions. [2022-04-08 08:14:14,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:14,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 341 transitions. [2022-04-08 08:14:14,712 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 341 transitions. [2022-04-08 08:14:14,991 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 341 edges. 341 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:14,994 INFO L225 Difference]: With dead ends: 270 [2022-04-08 08:14:14,994 INFO L226 Difference]: Without dead ends: 240 [2022-04-08 08:14:14,995 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=67, Unknown=0, NotChecked=0, Total=110 [2022-04-08 08:14:14,995 INFO L913 BasicCegarLoop]: 243 mSDtfsCounter, 484 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 347 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 484 SdHoareTripleChecker+Valid, 461 SdHoareTripleChecker+Invalid, 448 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 347 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:14,995 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [484 Valid, 461 Invalid, 448 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 347 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-08 08:14:14,996 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-04-08 08:14:15,276 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 240. [2022-04-08 08:14:15,276 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:15,277 INFO L82 GeneralOperation]: Start isEquivalent. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:15,277 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:15,277 INFO L87 Difference]: Start difference. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:15,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:15,280 INFO L93 Difference]: Finished difference Result 240 states and 317 transitions. [2022-04-08 08:14:15,280 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-08 08:14:15,281 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:15,281 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:15,281 INFO L74 IsIncluded]: Start isIncluded. First operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-08 08:14:15,282 INFO L87 Difference]: Start difference. First operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-08 08:14:15,285 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:15,285 INFO L93 Difference]: Finished difference Result 240 states and 317 transitions. [2022-04-08 08:14:15,285 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-08 08:14:15,285 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:15,285 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:15,285 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:15,286 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:15,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:15,289 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 317 transitions. [2022-04-08 08:14:15,290 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 317 transitions. Word has length 53 [2022-04-08 08:14:15,290 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:15,290 INFO L478 AbstractCegarLoop]: Abstraction has 240 states and 317 transitions. [2022-04-08 08:14:15,290 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:15,290 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 240 states and 317 transitions. [2022-04-08 08:14:15,639 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 317 edges. 317 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:15,639 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-08 08:14:15,640 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-04-08 08:14:15,640 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:15,640 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:15,645 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-04-08 08:14:15,645 INFO L403 AbstractCegarLoop]: === Iteration 10 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:15,645 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:15,645 INFO L85 PathProgramCache]: Analyzing trace with hash -1556296422, now seen corresponding path program 1 times [2022-04-08 08:14:15,646 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:15,646 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [164416012] [2022-04-08 08:14:15,646 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:15,646 INFO L85 PathProgramCache]: Analyzing trace with hash -1556296422, now seen corresponding path program 2 times [2022-04-08 08:14:15,646 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:15,646 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [83171894] [2022-04-08 08:14:15,646 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:15,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:15,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:15,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:15,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:15,718 INFO L290 TraceCheckUtils]: 0: Hoare triple {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18117#true} is VALID [2022-04-08 08:14:15,718 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-08 08:14:15,718 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18117#true} {18117#true} #783#return; {18117#true} is VALID [2022-04-08 08:14:15,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:15,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:15,754 INFO L290 TraceCheckUtils]: 0: Hoare triple {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,755 INFO L290 TraceCheckUtils]: 1: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume true; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,755 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18125#(not (= ~SKIP1~0 ~NP~0))} {18117#true} #715#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:15,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:15,771 INFO L290 TraceCheckUtils]: 0: Hoare triple {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18117#true} is VALID [2022-04-08 08:14:15,771 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-08 08:14:15,771 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18117#true} {18125#(not (= ~SKIP1~0 ~NP~0))} #717#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-08 08:14:15,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:15,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-08 08:14:15,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:15,818 INFO L290 TraceCheckUtils]: 0: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,818 INFO L290 TraceCheckUtils]: 1: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,818 INFO L290 TraceCheckUtils]: 2: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,819 INFO L290 TraceCheckUtils]: 3: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,819 INFO L290 TraceCheckUtils]: 4: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,819 INFO L290 TraceCheckUtils]: 5: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,819 INFO L290 TraceCheckUtils]: 6: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,820 INFO L290 TraceCheckUtils]: 7: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,820 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-08 08:14:15,821 INFO L290 TraceCheckUtils]: 0: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {18117#true} is VALID [2022-04-08 08:14:15,821 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume 2 == ~irpStack__MinorFunction~1; {18117#true} is VALID [2022-04-08 08:14:15,821 INFO L290 TraceCheckUtils]: 2: Hoare triple {18117#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {18117#true} is VALID [2022-04-08 08:14:15,822 INFO L290 TraceCheckUtils]: 3: Hoare triple {18117#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:14:15,822 INFO L290 TraceCheckUtils]: 4: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:14:15,823 INFO L272 TraceCheckUtils]: 5: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:15,823 INFO L290 TraceCheckUtils]: 6: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,824 INFO L290 TraceCheckUtils]: 7: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,824 INFO L290 TraceCheckUtils]: 8: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,824 INFO L290 TraceCheckUtils]: 9: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,824 INFO L290 TraceCheckUtils]: 10: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,825 INFO L290 TraceCheckUtils]: 11: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,825 INFO L290 TraceCheckUtils]: 12: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,825 INFO L290 TraceCheckUtils]: 13: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,826 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-08 08:14:15,826 INFO L290 TraceCheckUtils]: 15: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-08 08:14:15,826 INFO L290 TraceCheckUtils]: 16: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume true; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-08 08:14:15,827 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {18161#(= ~SKIP1~0 ~NP~0)} {18125#(not (= ~SKIP1~0 ~NP~0))} #725#return; {18118#false} is VALID [2022-04-08 08:14:15,829 INFO L272 TraceCheckUtils]: 0: Hoare triple {18117#true} call ULTIMATE.init(); {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:15,829 INFO L290 TraceCheckUtils]: 1: Hoare triple {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18117#true} is VALID [2022-04-08 08:14:15,829 INFO L290 TraceCheckUtils]: 2: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-08 08:14:15,829 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {18117#true} {18117#true} #783#return; {18117#true} is VALID [2022-04-08 08:14:15,829 INFO L272 TraceCheckUtils]: 4: Hoare triple {18117#true} call #t~ret81 := main(); {18117#true} is VALID [2022-04-08 08:14:15,829 INFO L290 TraceCheckUtils]: 5: Hoare triple {18117#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {18117#true} is VALID [2022-04-08 08:14:15,830 INFO L272 TraceCheckUtils]: 6: Hoare triple {18117#true} call _BLAST_init(); {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:15,831 INFO L290 TraceCheckUtils]: 7: Hoare triple {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,831 INFO L290 TraceCheckUtils]: 8: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume true; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,831 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {18125#(not (= ~SKIP1~0 ~NP~0))} {18117#true} #715#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,832 INFO L290 TraceCheckUtils]: 10: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,832 INFO L290 TraceCheckUtils]: 11: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(0 == ~irp_choice~0); {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,833 INFO L272 TraceCheckUtils]: 12: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} call stub_driver_init(); {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:15,833 INFO L290 TraceCheckUtils]: 13: Hoare triple {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18117#true} is VALID [2022-04-08 08:14:15,833 INFO L290 TraceCheckUtils]: 14: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-08 08:14:15,833 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {18117#true} {18125#(not (= ~SKIP1~0 ~NP~0))} #717#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,833 INFO L290 TraceCheckUtils]: 16: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,834 INFO L290 TraceCheckUtils]: 17: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,834 INFO L290 TraceCheckUtils]: 18: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,834 INFO L290 TraceCheckUtils]: 19: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,834 INFO L290 TraceCheckUtils]: 20: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume 4 == ~tmp_ndt_4~0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 08:14:15,835 INFO L272 TraceCheckUtils]: 21: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:15,835 INFO L290 TraceCheckUtils]: 22: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {18117#true} is VALID [2022-04-08 08:14:15,835 INFO L290 TraceCheckUtils]: 23: Hoare triple {18117#true} assume 2 == ~irpStack__MinorFunction~1; {18117#true} is VALID [2022-04-08 08:14:15,835 INFO L290 TraceCheckUtils]: 24: Hoare triple {18117#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {18117#true} is VALID [2022-04-08 08:14:15,835 INFO L290 TraceCheckUtils]: 25: Hoare triple {18117#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:14:15,836 INFO L290 TraceCheckUtils]: 26: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:14:15,836 INFO L272 TraceCheckUtils]: 27: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:15,837 INFO L290 TraceCheckUtils]: 28: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,837 INFO L290 TraceCheckUtils]: 29: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,837 INFO L290 TraceCheckUtils]: 30: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,837 INFO L290 TraceCheckUtils]: 31: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,838 INFO L290 TraceCheckUtils]: 32: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,838 INFO L290 TraceCheckUtils]: 33: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,838 INFO L290 TraceCheckUtils]: 34: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,839 INFO L290 TraceCheckUtils]: 35: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:15,839 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-08 08:14:15,840 INFO L290 TraceCheckUtils]: 37: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-08 08:14:15,840 INFO L290 TraceCheckUtils]: 38: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume true; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-08 08:14:15,840 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {18161#(= ~SKIP1~0 ~NP~0)} {18125#(not (= ~SKIP1~0 ~NP~0))} #725#return; {18118#false} is VALID [2022-04-08 08:14:15,841 INFO L290 TraceCheckUtils]: 40: Hoare triple {18118#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {18118#false} is VALID [2022-04-08 08:14:15,841 INFO L290 TraceCheckUtils]: 41: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-08 08:14:15,841 INFO L290 TraceCheckUtils]: 42: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-08 08:14:15,841 INFO L290 TraceCheckUtils]: 43: Hoare triple {18118#false} assume ~s~0 != ~UNLOADED~0; {18118#false} is VALID [2022-04-08 08:14:15,841 INFO L290 TraceCheckUtils]: 44: Hoare triple {18118#false} assume -1 != ~status~1; {18118#false} is VALID [2022-04-08 08:14:15,841 INFO L290 TraceCheckUtils]: 45: Hoare triple {18118#false} assume !(~s~0 != ~SKIP2~0); {18118#false} is VALID [2022-04-08 08:14:15,841 INFO L290 TraceCheckUtils]: 46: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-08 08:14:15,841 INFO L290 TraceCheckUtils]: 47: Hoare triple {18118#false} assume !(~s~0 == ~DC~0); {18118#false} is VALID [2022-04-08 08:14:15,841 INFO L290 TraceCheckUtils]: 48: Hoare triple {18118#false} assume ~status~1 != ~lowerDriverReturn~0; {18118#false} is VALID [2022-04-08 08:14:15,841 INFO L272 TraceCheckUtils]: 49: Hoare triple {18118#false} call errorFn(); {18118#false} is VALID [2022-04-08 08:14:15,841 INFO L290 TraceCheckUtils]: 50: Hoare triple {18118#false} assume !false; {18118#false} is VALID [2022-04-08 08:14:15,842 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:15,842 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:15,842 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [83171894] [2022-04-08 08:14:15,842 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [83171894] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:15,842 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:15,842 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-08 08:14:15,842 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:15,842 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [164416012] [2022-04-08 08:14:15,842 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [164416012] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:15,842 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:15,842 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-08 08:14:15,842 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1460371549] [2022-04-08 08:14:15,842 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:15,843 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 51 [2022-04-08 08:14:15,843 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:15,843 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 08:14:15,874 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:15,875 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-08 08:14:15,875 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:15,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-08 08:14:15,875 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-08 08:14:15,875 INFO L87 Difference]: Start difference. First operand 240 states and 317 transitions. Second operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 08:14:18,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:18,167 INFO L93 Difference]: Finished difference Result 284 states and 365 transitions. [2022-04-08 08:14:18,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-08 08:14:18,167 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 51 [2022-04-08 08:14:18,167 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:18,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 08:14:18,169 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 365 transitions. [2022-04-08 08:14:18,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 08:14:18,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 365 transitions. [2022-04-08 08:14:18,171 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 365 transitions. [2022-04-08 08:14:18,483 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:18,487 INFO L225 Difference]: With dead ends: 284 [2022-04-08 08:14:18,487 INFO L226 Difference]: Without dead ends: 243 [2022-04-08 08:14:18,488 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=109, Invalid=311, Unknown=0, NotChecked=0, Total=420 [2022-04-08 08:14:18,488 INFO L913 BasicCegarLoop]: 252 mSDtfsCounter, 655 mSDsluCounter, 341 mSDsCounter, 0 mSdLazyCounter, 741 mSolverCounterSat, 143 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 660 SdHoareTripleChecker+Valid, 593 SdHoareTripleChecker+Invalid, 884 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 143 IncrementalHoareTripleChecker+Valid, 741 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:18,488 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [660 Valid, 593 Invalid, 884 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [143 Valid, 741 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-08 08:14:18,489 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2022-04-08 08:14:18,776 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 240. [2022-04-08 08:14:18,777 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:18,777 INFO L82 GeneralOperation]: Start isEquivalent. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:18,777 INFO L74 IsIncluded]: Start isIncluded. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:18,778 INFO L87 Difference]: Start difference. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:18,781 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:18,781 INFO L93 Difference]: Finished difference Result 243 states and 317 transitions. [2022-04-08 08:14:18,781 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 317 transitions. [2022-04-08 08:14:18,781 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:18,781 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:18,782 INFO L74 IsIncluded]: Start isIncluded. First operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 243 states. [2022-04-08 08:14:18,782 INFO L87 Difference]: Start difference. First operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 243 states. [2022-04-08 08:14:18,785 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:18,785 INFO L93 Difference]: Finished difference Result 243 states and 317 transitions. [2022-04-08 08:14:18,785 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 317 transitions. [2022-04-08 08:14:18,786 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:18,786 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:18,786 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:18,786 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:18,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:18,790 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 315 transitions. [2022-04-08 08:14:18,790 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 315 transitions. Word has length 51 [2022-04-08 08:14:18,790 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:18,790 INFO L478 AbstractCegarLoop]: Abstraction has 240 states and 315 transitions. [2022-04-08 08:14:18,791 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 08:14:18,791 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 240 states and 315 transitions. [2022-04-08 08:14:19,143 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 315 edges. 315 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:19,143 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 315 transitions. [2022-04-08 08:14:19,144 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-08 08:14:19,144 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:19,144 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:19,144 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-04-08 08:14:19,144 INFO L403 AbstractCegarLoop]: === Iteration 11 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:19,144 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:19,144 INFO L85 PathProgramCache]: Analyzing trace with hash 460482069, now seen corresponding path program 1 times [2022-04-08 08:14:19,144 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:19,144 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [308770501] [2022-04-08 08:14:19,145 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:19,145 INFO L85 PathProgramCache]: Analyzing trace with hash 460482069, now seen corresponding path program 2 times [2022-04-08 08:14:19,145 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:19,145 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [228931375] [2022-04-08 08:14:19,145 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:19,145 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:19,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:19,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:19,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:19,222 INFO L290 TraceCheckUtils]: 0: Hoare triple {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {19722#true} is VALID [2022-04-08 08:14:19,222 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-08 08:14:19,223 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19722#true} {19722#true} #783#return; {19722#true} is VALID [2022-04-08 08:14:19,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:19,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:19,257 INFO L290 TraceCheckUtils]: 0: Hoare triple {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 08:14:19,258 INFO L290 TraceCheckUtils]: 1: Hoare triple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 08:14:19,258 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {19722#true} #715#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:19,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:19,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:19,270 INFO L290 TraceCheckUtils]: 0: Hoare triple {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19722#true} is VALID [2022-04-08 08:14:19,271 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-08 08:14:19,271 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19722#true} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:19,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-08 08:14:19,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:19,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-08 08:14:19,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:19,318 INFO L290 TraceCheckUtils]: 0: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-08 08:14:19,318 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-08 08:14:19,318 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-08 08:14:19,318 INFO L290 TraceCheckUtils]: 3: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-08 08:14:19,318 INFO L290 TraceCheckUtils]: 4: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-08 08:14:19,319 INFO L290 TraceCheckUtils]: 5: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-08 08:14:19,319 INFO L290 TraceCheckUtils]: 6: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-08 08:14:19,319 INFO L290 TraceCheckUtils]: 7: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-08 08:14:19,319 INFO L290 TraceCheckUtils]: 8: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-08 08:14:19,319 INFO L290 TraceCheckUtils]: 9: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-08 08:14:19,320 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-08 08:14:19,320 INFO L290 TraceCheckUtils]: 0: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {19722#true} is VALID [2022-04-08 08:14:19,320 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume 2 == ~irpStack__MinorFunction~1; {19722#true} is VALID [2022-04-08 08:14:19,320 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {19722#true} is VALID [2022-04-08 08:14:19,320 INFO L290 TraceCheckUtils]: 3: Hoare triple {19722#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {19722#true} is VALID [2022-04-08 08:14:19,320 INFO L290 TraceCheckUtils]: 4: Hoare triple {19722#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {19722#true} is VALID [2022-04-08 08:14:19,321 INFO L272 TraceCheckUtils]: 5: Hoare triple {19722#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:19,321 INFO L290 TraceCheckUtils]: 6: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-08 08:14:19,321 INFO L290 TraceCheckUtils]: 7: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-08 08:14:19,321 INFO L290 TraceCheckUtils]: 8: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-08 08:14:19,321 INFO L290 TraceCheckUtils]: 9: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-08 08:14:19,321 INFO L290 TraceCheckUtils]: 10: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-08 08:14:19,321 INFO L290 TraceCheckUtils]: 11: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-08 08:14:19,322 INFO L290 TraceCheckUtils]: 12: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-08 08:14:19,322 INFO L290 TraceCheckUtils]: 13: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-08 08:14:19,322 INFO L290 TraceCheckUtils]: 14: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-08 08:14:19,322 INFO L290 TraceCheckUtils]: 15: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-08 08:14:19,322 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-08 08:14:19,322 INFO L290 TraceCheckUtils]: 17: Hoare triple {19723#false} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {19723#false} is VALID [2022-04-08 08:14:19,322 INFO L290 TraceCheckUtils]: 18: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-08 08:14:19,322 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {19723#false} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {19723#false} is VALID [2022-04-08 08:14:19,323 INFO L272 TraceCheckUtils]: 0: Hoare triple {19722#true} call ULTIMATE.init(); {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:19,324 INFO L290 TraceCheckUtils]: 1: Hoare triple {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {19722#true} is VALID [2022-04-08 08:14:19,324 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-08 08:14:19,324 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {19722#true} {19722#true} #783#return; {19722#true} is VALID [2022-04-08 08:14:19,324 INFO L272 TraceCheckUtils]: 4: Hoare triple {19722#true} call #t~ret81 := main(); {19722#true} is VALID [2022-04-08 08:14:19,324 INFO L290 TraceCheckUtils]: 5: Hoare triple {19722#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {19722#true} is VALID [2022-04-08 08:14:19,325 INFO L272 TraceCheckUtils]: 6: Hoare triple {19722#true} call _BLAST_init(); {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:19,325 INFO L290 TraceCheckUtils]: 7: Hoare triple {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 08:14:19,325 INFO L290 TraceCheckUtils]: 8: Hoare triple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 08:14:19,326 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {19722#true} #715#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:19,326 INFO L290 TraceCheckUtils]: 10: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:19,327 INFO L290 TraceCheckUtils]: 11: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~irp_choice~0); {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:19,327 INFO L272 TraceCheckUtils]: 12: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call stub_driver_init(); {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:19,327 INFO L290 TraceCheckUtils]: 13: Hoare triple {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19722#true} is VALID [2022-04-08 08:14:19,327 INFO L290 TraceCheckUtils]: 14: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-08 08:14:19,328 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {19722#true} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:19,328 INFO L290 TraceCheckUtils]: 16: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:19,328 INFO L290 TraceCheckUtils]: 17: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:19,329 INFO L290 TraceCheckUtils]: 18: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:19,329 INFO L290 TraceCheckUtils]: 19: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:19,329 INFO L290 TraceCheckUtils]: 20: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 4 == ~tmp_ndt_4~0; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:19,330 INFO L272 TraceCheckUtils]: 21: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:19,330 INFO L290 TraceCheckUtils]: 22: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {19722#true} is VALID [2022-04-08 08:14:19,330 INFO L290 TraceCheckUtils]: 23: Hoare triple {19722#true} assume 2 == ~irpStack__MinorFunction~1; {19722#true} is VALID [2022-04-08 08:14:19,330 INFO L290 TraceCheckUtils]: 24: Hoare triple {19722#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {19722#true} is VALID [2022-04-08 08:14:19,330 INFO L290 TraceCheckUtils]: 25: Hoare triple {19722#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {19722#true} is VALID [2022-04-08 08:14:19,330 INFO L290 TraceCheckUtils]: 26: Hoare triple {19722#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {19722#true} is VALID [2022-04-08 08:14:19,331 INFO L272 TraceCheckUtils]: 27: Hoare triple {19722#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:19,331 INFO L290 TraceCheckUtils]: 28: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-08 08:14:19,331 INFO L290 TraceCheckUtils]: 29: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-08 08:14:19,331 INFO L290 TraceCheckUtils]: 30: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-08 08:14:19,331 INFO L290 TraceCheckUtils]: 31: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-08 08:14:19,331 INFO L290 TraceCheckUtils]: 32: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-08 08:14:19,331 INFO L290 TraceCheckUtils]: 33: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-08 08:14:19,332 INFO L290 TraceCheckUtils]: 34: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-08 08:14:19,332 INFO L290 TraceCheckUtils]: 35: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-08 08:14:19,332 INFO L290 TraceCheckUtils]: 36: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-08 08:14:19,332 INFO L290 TraceCheckUtils]: 37: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-08 08:14:19,332 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-08 08:14:19,332 INFO L290 TraceCheckUtils]: 39: Hoare triple {19723#false} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {19723#false} is VALID [2022-04-08 08:14:19,332 INFO L290 TraceCheckUtils]: 40: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-08 08:14:19,332 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {19723#false} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {19723#false} is VALID [2022-04-08 08:14:19,333 INFO L290 TraceCheckUtils]: 42: Hoare triple {19723#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {19723#false} is VALID [2022-04-08 08:14:19,333 INFO L290 TraceCheckUtils]: 43: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-08 08:14:19,333 INFO L290 TraceCheckUtils]: 44: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-08 08:14:19,333 INFO L290 TraceCheckUtils]: 45: Hoare triple {19723#false} assume ~s~0 != ~UNLOADED~0; {19723#false} is VALID [2022-04-08 08:14:19,333 INFO L290 TraceCheckUtils]: 46: Hoare triple {19723#false} assume -1 != ~status~1; {19723#false} is VALID [2022-04-08 08:14:19,333 INFO L290 TraceCheckUtils]: 47: Hoare triple {19723#false} assume !(~s~0 != ~SKIP2~0); {19723#false} is VALID [2022-04-08 08:14:19,333 INFO L290 TraceCheckUtils]: 48: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-08 08:14:19,333 INFO L290 TraceCheckUtils]: 49: Hoare triple {19723#false} assume !(~s~0 == ~DC~0); {19723#false} is VALID [2022-04-08 08:14:19,333 INFO L290 TraceCheckUtils]: 50: Hoare triple {19723#false} assume ~status~1 != ~lowerDriverReturn~0; {19723#false} is VALID [2022-04-08 08:14:19,333 INFO L272 TraceCheckUtils]: 51: Hoare triple {19723#false} call errorFn(); {19723#false} is VALID [2022-04-08 08:14:19,333 INFO L290 TraceCheckUtils]: 52: Hoare triple {19723#false} assume !false; {19723#false} is VALID [2022-04-08 08:14:19,334 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:19,334 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:19,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [228931375] [2022-04-08 08:14:19,334 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [228931375] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:19,334 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:19,334 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-08 08:14:19,334 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:19,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [308770501] [2022-04-08 08:14:19,334 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [308770501] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:19,334 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:19,334 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-08 08:14:19,334 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [339741530] [2022-04-08 08:14:19,334 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:19,336 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 53 [2022-04-08 08:14:19,336 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:19,336 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:19,364 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:19,364 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-08 08:14:19,364 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:19,364 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-08 08:14:19,364 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2022-04-08 08:14:19,365 INFO L87 Difference]: Start difference. First operand 240 states and 315 transitions. Second operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:21,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:21,399 INFO L93 Difference]: Finished difference Result 272 states and 349 transitions. [2022-04-08 08:14:21,399 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-08 08:14:21,399 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 53 [2022-04-08 08:14:21,399 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:21,400 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:21,413 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 325 transitions. [2022-04-08 08:14:21,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:21,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 325 transitions. [2022-04-08 08:14:21,417 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 325 transitions. [2022-04-08 08:14:21,711 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 325 edges. 325 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:21,715 INFO L225 Difference]: With dead ends: 272 [2022-04-08 08:14:21,715 INFO L226 Difference]: Without dead ends: 253 [2022-04-08 08:14:21,716 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 37 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=95, Invalid=211, Unknown=0, NotChecked=0, Total=306 [2022-04-08 08:14:21,716 INFO L913 BasicCegarLoop]: 238 mSDtfsCounter, 723 mSDsluCounter, 298 mSDsCounter, 0 mSdLazyCounter, 434 mSolverCounterSat, 102 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 726 SdHoareTripleChecker+Valid, 536 SdHoareTripleChecker+Invalid, 536 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 102 IncrementalHoareTripleChecker+Valid, 434 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:21,716 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [726 Valid, 536 Invalid, 536 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [102 Valid, 434 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-08 08:14:21,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 253 states. [2022-04-08 08:14:22,064 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 253 to 243. [2022-04-08 08:14:22,065 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:22,065 INFO L82 GeneralOperation]: Start isEquivalent. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:22,066 INFO L74 IsIncluded]: Start isIncluded. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:22,066 INFO L87 Difference]: Start difference. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:22,070 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:22,070 INFO L93 Difference]: Finished difference Result 253 states and 329 transitions. [2022-04-08 08:14:22,070 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 329 transitions. [2022-04-08 08:14:22,071 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:22,071 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:22,071 INFO L74 IsIncluded]: Start isIncluded. First operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 253 states. [2022-04-08 08:14:22,071 INFO L87 Difference]: Start difference. First operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 253 states. [2022-04-08 08:14:22,075 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:22,076 INFO L93 Difference]: Finished difference Result 253 states and 329 transitions. [2022-04-08 08:14:22,076 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 329 transitions. [2022-04-08 08:14:22,076 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:22,076 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:22,076 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:22,076 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:22,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:22,081 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 319 transitions. [2022-04-08 08:14:22,081 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 319 transitions. Word has length 53 [2022-04-08 08:14:22,081 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:22,081 INFO L478 AbstractCegarLoop]: Abstraction has 243 states and 319 transitions. [2022-04-08 08:14:22,081 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 08:14:22,081 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 243 states and 319 transitions. [2022-04-08 08:14:22,444 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 319 edges. 319 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:22,444 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 319 transitions. [2022-04-08 08:14:22,445 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-08 08:14:22,445 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:22,445 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:22,446 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-04-08 08:14:22,446 INFO L403 AbstractCegarLoop]: === Iteration 12 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:22,446 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:22,446 INFO L85 PathProgramCache]: Analyzing trace with hash -1533662637, now seen corresponding path program 1 times [2022-04-08 08:14:22,446 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:22,446 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [296380581] [2022-04-08 08:14:22,446 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:22,446 INFO L85 PathProgramCache]: Analyzing trace with hash -1533662637, now seen corresponding path program 2 times [2022-04-08 08:14:22,446 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:22,447 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2008606110] [2022-04-08 08:14:22,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:22,447 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:22,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:22,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:22,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:22,537 INFO L290 TraceCheckUtils]: 0: Hoare triple {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {21327#true} is VALID [2022-04-08 08:14:22,537 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-08 08:14:22,537 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21327#true} {21327#true} #783#return; {21327#true} is VALID [2022-04-08 08:14:22,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:22,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:22,575 INFO L290 TraceCheckUtils]: 0: Hoare triple {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 08:14:22,575 INFO L290 TraceCheckUtils]: 1: Hoare triple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 08:14:22,576 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {21327#true} #715#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:22,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:22,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:22,592 INFO L290 TraceCheckUtils]: 0: Hoare triple {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21327#true} is VALID [2022-04-08 08:14:22,592 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-08 08:14:22,592 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21327#true} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:22,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-08 08:14:22,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:22,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-08 08:14:22,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:22,651 INFO L290 TraceCheckUtils]: 0: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,651 INFO L290 TraceCheckUtils]: 1: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,652 INFO L290 TraceCheckUtils]: 2: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,652 INFO L290 TraceCheckUtils]: 3: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,652 INFO L290 TraceCheckUtils]: 4: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,652 INFO L290 TraceCheckUtils]: 5: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,653 INFO L290 TraceCheckUtils]: 6: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,653 INFO L290 TraceCheckUtils]: 7: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,653 INFO L290 TraceCheckUtils]: 8: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,653 INFO L290 TraceCheckUtils]: 9: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,654 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-08 08:14:22,654 INFO L290 TraceCheckUtils]: 0: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {21327#true} is VALID [2022-04-08 08:14:22,654 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume 2 == ~irpStack__MinorFunction~1; {21327#true} is VALID [2022-04-08 08:14:22,654 INFO L290 TraceCheckUtils]: 2: Hoare triple {21327#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {21327#true} is VALID [2022-04-08 08:14:22,655 INFO L290 TraceCheckUtils]: 3: Hoare triple {21327#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:14:22,655 INFO L290 TraceCheckUtils]: 4: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:14:22,656 INFO L272 TraceCheckUtils]: 5: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:22,656 INFO L290 TraceCheckUtils]: 6: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,656 INFO L290 TraceCheckUtils]: 7: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,656 INFO L290 TraceCheckUtils]: 8: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,656 INFO L290 TraceCheckUtils]: 9: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,657 INFO L290 TraceCheckUtils]: 10: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,657 INFO L290 TraceCheckUtils]: 11: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,657 INFO L290 TraceCheckUtils]: 12: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,657 INFO L290 TraceCheckUtils]: 13: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,658 INFO L290 TraceCheckUtils]: 14: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,658 INFO L290 TraceCheckUtils]: 15: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,659 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-08 08:14:22,659 INFO L290 TraceCheckUtils]: 17: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-08 08:14:22,659 INFO L290 TraceCheckUtils]: 18: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume true; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-08 08:14:22,660 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {21376#(= ~MPR1~0 ~SKIP1~0)} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {21328#false} is VALID [2022-04-08 08:14:22,661 INFO L272 TraceCheckUtils]: 0: Hoare triple {21327#true} call ULTIMATE.init(); {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:22,661 INFO L290 TraceCheckUtils]: 1: Hoare triple {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {21327#true} is VALID [2022-04-08 08:14:22,661 INFO L290 TraceCheckUtils]: 2: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-08 08:14:22,661 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {21327#true} {21327#true} #783#return; {21327#true} is VALID [2022-04-08 08:14:22,661 INFO L272 TraceCheckUtils]: 4: Hoare triple {21327#true} call #t~ret81 := main(); {21327#true} is VALID [2022-04-08 08:14:22,661 INFO L290 TraceCheckUtils]: 5: Hoare triple {21327#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {21327#true} is VALID [2022-04-08 08:14:22,662 INFO L272 TraceCheckUtils]: 6: Hoare triple {21327#true} call _BLAST_init(); {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:22,663 INFO L290 TraceCheckUtils]: 7: Hoare triple {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 08:14:22,663 INFO L290 TraceCheckUtils]: 8: Hoare triple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 08:14:22,664 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {21327#true} #715#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:22,664 INFO L290 TraceCheckUtils]: 10: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:22,664 INFO L290 TraceCheckUtils]: 11: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~irp_choice~0); {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:22,665 INFO L272 TraceCheckUtils]: 12: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call stub_driver_init(); {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:22,665 INFO L290 TraceCheckUtils]: 13: Hoare triple {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21327#true} is VALID [2022-04-08 08:14:22,665 INFO L290 TraceCheckUtils]: 14: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-08 08:14:22,665 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {21327#true} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:22,666 INFO L290 TraceCheckUtils]: 16: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:22,666 INFO L290 TraceCheckUtils]: 17: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:22,666 INFO L290 TraceCheckUtils]: 18: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:22,667 INFO L290 TraceCheckUtils]: 19: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:22,667 INFO L290 TraceCheckUtils]: 20: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 4 == ~tmp_ndt_4~0; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 08:14:22,667 INFO L272 TraceCheckUtils]: 21: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:22,668 INFO L290 TraceCheckUtils]: 22: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {21327#true} is VALID [2022-04-08 08:14:22,668 INFO L290 TraceCheckUtils]: 23: Hoare triple {21327#true} assume 2 == ~irpStack__MinorFunction~1; {21327#true} is VALID [2022-04-08 08:14:22,668 INFO L290 TraceCheckUtils]: 24: Hoare triple {21327#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {21327#true} is VALID [2022-04-08 08:14:22,668 INFO L290 TraceCheckUtils]: 25: Hoare triple {21327#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:14:22,668 INFO L290 TraceCheckUtils]: 26: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 08:14:22,669 INFO L272 TraceCheckUtils]: 27: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:22,669 INFO L290 TraceCheckUtils]: 28: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,669 INFO L290 TraceCheckUtils]: 29: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,669 INFO L290 TraceCheckUtils]: 30: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,670 INFO L290 TraceCheckUtils]: 31: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,670 INFO L290 TraceCheckUtils]: 32: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,670 INFO L290 TraceCheckUtils]: 33: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,670 INFO L290 TraceCheckUtils]: 34: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,671 INFO L290 TraceCheckUtils]: 35: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,671 INFO L290 TraceCheckUtils]: 36: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,671 INFO L290 TraceCheckUtils]: 37: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 08:14:22,672 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-08 08:14:22,672 INFO L290 TraceCheckUtils]: 39: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-08 08:14:22,672 INFO L290 TraceCheckUtils]: 40: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume true; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-08 08:14:22,673 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {21376#(= ~MPR1~0 ~SKIP1~0)} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {21328#false} is VALID [2022-04-08 08:14:22,673 INFO L290 TraceCheckUtils]: 42: Hoare triple {21328#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {21328#false} is VALID [2022-04-08 08:14:22,673 INFO L290 TraceCheckUtils]: 43: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-08 08:14:22,673 INFO L290 TraceCheckUtils]: 44: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-08 08:14:22,673 INFO L290 TraceCheckUtils]: 45: Hoare triple {21328#false} assume ~s~0 != ~UNLOADED~0; {21328#false} is VALID [2022-04-08 08:14:22,673 INFO L290 TraceCheckUtils]: 46: Hoare triple {21328#false} assume -1 != ~status~1; {21328#false} is VALID [2022-04-08 08:14:22,673 INFO L290 TraceCheckUtils]: 47: Hoare triple {21328#false} assume !(~s~0 != ~SKIP2~0); {21328#false} is VALID [2022-04-08 08:14:22,673 INFO L290 TraceCheckUtils]: 48: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-08 08:14:22,673 INFO L290 TraceCheckUtils]: 49: Hoare triple {21328#false} assume !(~s~0 == ~DC~0); {21328#false} is VALID [2022-04-08 08:14:22,674 INFO L290 TraceCheckUtils]: 50: Hoare triple {21328#false} assume ~status~1 != ~lowerDriverReturn~0; {21328#false} is VALID [2022-04-08 08:14:22,674 INFO L272 TraceCheckUtils]: 51: Hoare triple {21328#false} call errorFn(); {21328#false} is VALID [2022-04-08 08:14:22,674 INFO L290 TraceCheckUtils]: 52: Hoare triple {21328#false} assume !false; {21328#false} is VALID [2022-04-08 08:14:22,674 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:22,674 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:22,674 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2008606110] [2022-04-08 08:14:22,674 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2008606110] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:22,674 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:22,674 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 08:14:22,675 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:22,675 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [296380581] [2022-04-08 08:14:22,675 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [296380581] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:22,675 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:22,675 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 08:14:22,675 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1410803571] [2022-04-08 08:14:22,675 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:22,675 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 53 [2022-04-08 08:14:22,675 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:22,676 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 08:14:22,704 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:22,705 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-08 08:14:22,705 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:22,706 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-08 08:14:22,706 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-08 08:14:22,706 INFO L87 Difference]: Start difference. First operand 243 states and 319 transitions. Second operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 08:14:25,351 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:25,351 INFO L93 Difference]: Finished difference Result 284 states and 365 transitions. [2022-04-08 08:14:25,352 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-08 08:14:25,352 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 53 [2022-04-08 08:14:25,352 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:25,352 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 08:14:25,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 347 transitions. [2022-04-08 08:14:25,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 08:14:25,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 347 transitions. [2022-04-08 08:14:25,356 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 347 transitions. [2022-04-08 08:14:25,672 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 347 edges. 347 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:25,676 INFO L225 Difference]: With dead ends: 284 [2022-04-08 08:14:25,676 INFO L226 Difference]: Without dead ends: 240 [2022-04-08 08:14:25,676 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=101, Invalid=279, Unknown=0, NotChecked=0, Total=380 [2022-04-08 08:14:25,676 INFO L913 BasicCegarLoop]: 234 mSDtfsCounter, 964 mSDsluCounter, 349 mSDsCounter, 0 mSdLazyCounter, 711 mSolverCounterSat, 177 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 965 SdHoareTripleChecker+Valid, 583 SdHoareTripleChecker+Invalid, 888 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 177 IncrementalHoareTripleChecker+Valid, 711 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:25,677 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [965 Valid, 583 Invalid, 888 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [177 Valid, 711 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-08 08:14:25,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-04-08 08:14:26,020 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 238. [2022-04-08 08:14:26,020 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:26,021 INFO L82 GeneralOperation]: Start isEquivalent. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:26,021 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:26,021 INFO L87 Difference]: Start difference. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:26,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:26,026 INFO L93 Difference]: Finished difference Result 240 states and 311 transitions. [2022-04-08 08:14:26,026 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 311 transitions. [2022-04-08 08:14:26,027 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:26,027 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:26,027 INFO L74 IsIncluded]: Start isIncluded. First operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-08 08:14:26,027 INFO L87 Difference]: Start difference. First operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-08 08:14:26,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:26,031 INFO L93 Difference]: Finished difference Result 240 states and 311 transitions. [2022-04-08 08:14:26,031 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 311 transitions. [2022-04-08 08:14:26,032 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:26,032 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:26,032 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:26,032 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:26,032 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 08:14:26,036 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 238 states to 238 states and 309 transitions. [2022-04-08 08:14:26,036 INFO L78 Accepts]: Start accepts. Automaton has 238 states and 309 transitions. Word has length 53 [2022-04-08 08:14:26,036 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:26,036 INFO L478 AbstractCegarLoop]: Abstraction has 238 states and 309 transitions. [2022-04-08 08:14:26,037 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 08:14:26,037 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 238 states and 309 transitions. [2022-04-08 08:14:26,396 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 309 edges. 309 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:26,397 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 309 transitions. [2022-04-08 08:14:26,397 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-08 08:14:26,398 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:26,398 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:26,398 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-04-08 08:14:26,398 INFO L403 AbstractCegarLoop]: === Iteration 13 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:26,398 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:26,398 INFO L85 PathProgramCache]: Analyzing trace with hash -1386969835, now seen corresponding path program 1 times [2022-04-08 08:14:26,398 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:26,398 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [286470900] [2022-04-08 08:14:26,399 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:26,399 INFO L85 PathProgramCache]: Analyzing trace with hash -1386969835, now seen corresponding path program 2 times [2022-04-08 08:14:26,399 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:26,399 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1029122366] [2022-04-08 08:14:26,399 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:26,399 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:26,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:26,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:26,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:26,458 INFO L290 TraceCheckUtils]: 0: Hoare triple {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-08 08:14:26,458 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-08 08:14:26,458 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #783#return; {22923#true} is VALID [2022-04-08 08:14:26,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:26,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:26,478 INFO L290 TraceCheckUtils]: 0: Hoare triple {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-08 08:14:26,478 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-08 08:14:26,478 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #715#return; {22923#true} is VALID [2022-04-08 08:14:26,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:26,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:26,491 INFO L290 TraceCheckUtils]: 0: Hoare triple {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-08 08:14:26,491 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-08 08:14:26,491 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #717#return; {22923#true} is VALID [2022-04-08 08:14:26,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-08 08:14:26,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:26,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-08 08:14:26,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:26,552 INFO L290 TraceCheckUtils]: 0: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-08 08:14:26,552 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-08 08:14:26,552 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-08 08:14:26,553 INFO L290 TraceCheckUtils]: 3: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-08 08:14:26,553 INFO L290 TraceCheckUtils]: 4: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-08 08:14:26,553 INFO L290 TraceCheckUtils]: 5: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-08 08:14:26,553 INFO L290 TraceCheckUtils]: 6: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-08 08:14:26,554 INFO L290 TraceCheckUtils]: 7: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-08 08:14:26,554 INFO L290 TraceCheckUtils]: 8: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,554 INFO L290 TraceCheckUtils]: 9: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,555 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-08 08:14:26,555 INFO L290 TraceCheckUtils]: 0: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {22923#true} is VALID [2022-04-08 08:14:26,555 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume 2 == ~irpStack__MinorFunction~1; {22923#true} is VALID [2022-04-08 08:14:26,555 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {22923#true} is VALID [2022-04-08 08:14:26,555 INFO L290 TraceCheckUtils]: 3: Hoare triple {22923#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {22923#true} is VALID [2022-04-08 08:14:26,555 INFO L290 TraceCheckUtils]: 4: Hoare triple {22923#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {22923#true} is VALID [2022-04-08 08:14:26,556 INFO L272 TraceCheckUtils]: 5: Hoare triple {22923#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:26,556 INFO L290 TraceCheckUtils]: 6: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-08 08:14:26,556 INFO L290 TraceCheckUtils]: 7: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-08 08:14:26,556 INFO L290 TraceCheckUtils]: 8: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-08 08:14:26,556 INFO L290 TraceCheckUtils]: 9: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-08 08:14:26,556 INFO L290 TraceCheckUtils]: 10: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-08 08:14:26,556 INFO L290 TraceCheckUtils]: 11: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-08 08:14:26,556 INFO L290 TraceCheckUtils]: 12: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-08 08:14:26,557 INFO L290 TraceCheckUtils]: 13: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-08 08:14:26,557 INFO L290 TraceCheckUtils]: 14: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,557 INFO L290 TraceCheckUtils]: 15: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,558 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-08 08:14:26,558 INFO L290 TraceCheckUtils]: 17: Hoare triple {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,558 INFO L290 TraceCheckUtils]: 18: Hoare triple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} assume true; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,559 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} {22923#true} #725#return; {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,561 INFO L272 TraceCheckUtils]: 0: Hoare triple {22923#true} call ULTIMATE.init(); {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:26,561 INFO L290 TraceCheckUtils]: 1: Hoare triple {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-08 08:14:26,561 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-08 08:14:26,561 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {22923#true} {22923#true} #783#return; {22923#true} is VALID [2022-04-08 08:14:26,561 INFO L272 TraceCheckUtils]: 4: Hoare triple {22923#true} call #t~ret81 := main(); {22923#true} is VALID [2022-04-08 08:14:26,561 INFO L290 TraceCheckUtils]: 5: Hoare triple {22923#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {22923#true} is VALID [2022-04-08 08:14:26,562 INFO L272 TraceCheckUtils]: 6: Hoare triple {22923#true} call _BLAST_init(); {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:26,562 INFO L290 TraceCheckUtils]: 7: Hoare triple {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-08 08:14:26,562 INFO L290 TraceCheckUtils]: 8: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-08 08:14:26,562 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {22923#true} {22923#true} #715#return; {22923#true} is VALID [2022-04-08 08:14:26,562 INFO L290 TraceCheckUtils]: 10: Hoare triple {22923#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-08 08:14:26,562 INFO L290 TraceCheckUtils]: 11: Hoare triple {22923#true} assume !(0 == ~irp_choice~0); {22923#true} is VALID [2022-04-08 08:14:26,563 INFO L272 TraceCheckUtils]: 12: Hoare triple {22923#true} call stub_driver_init(); {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:26,563 INFO L290 TraceCheckUtils]: 13: Hoare triple {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-08 08:14:26,563 INFO L290 TraceCheckUtils]: 14: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-08 08:14:26,563 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {22923#true} {22923#true} #717#return; {22923#true} is VALID [2022-04-08 08:14:26,563 INFO L290 TraceCheckUtils]: 16: Hoare triple {22923#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {22923#true} is VALID [2022-04-08 08:14:26,563 INFO L290 TraceCheckUtils]: 17: Hoare triple {22923#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {22923#true} is VALID [2022-04-08 08:14:26,563 INFO L290 TraceCheckUtils]: 18: Hoare triple {22923#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {22923#true} is VALID [2022-04-08 08:14:26,563 INFO L290 TraceCheckUtils]: 19: Hoare triple {22923#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {22923#true} is VALID [2022-04-08 08:14:26,563 INFO L290 TraceCheckUtils]: 20: Hoare triple {22923#true} assume 4 == ~tmp_ndt_4~0; {22923#true} is VALID [2022-04-08 08:14:26,564 INFO L272 TraceCheckUtils]: 21: Hoare triple {22923#true} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:26,564 INFO L290 TraceCheckUtils]: 22: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {22923#true} is VALID [2022-04-08 08:14:26,564 INFO L290 TraceCheckUtils]: 23: Hoare triple {22923#true} assume 2 == ~irpStack__MinorFunction~1; {22923#true} is VALID [2022-04-08 08:14:26,564 INFO L290 TraceCheckUtils]: 24: Hoare triple {22923#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {22923#true} is VALID [2022-04-08 08:14:26,564 INFO L290 TraceCheckUtils]: 25: Hoare triple {22923#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {22923#true} is VALID [2022-04-08 08:14:26,564 INFO L290 TraceCheckUtils]: 26: Hoare triple {22923#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {22923#true} is VALID [2022-04-08 08:14:26,565 INFO L272 TraceCheckUtils]: 27: Hoare triple {22923#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:26,565 INFO L290 TraceCheckUtils]: 28: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-08 08:14:26,565 INFO L290 TraceCheckUtils]: 29: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-08 08:14:26,565 INFO L290 TraceCheckUtils]: 30: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-08 08:14:26,565 INFO L290 TraceCheckUtils]: 31: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-08 08:14:26,565 INFO L290 TraceCheckUtils]: 32: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-08 08:14:26,565 INFO L290 TraceCheckUtils]: 33: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-08 08:14:26,565 INFO L290 TraceCheckUtils]: 34: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-08 08:14:26,565 INFO L290 TraceCheckUtils]: 35: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-08 08:14:26,566 INFO L290 TraceCheckUtils]: 36: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,566 INFO L290 TraceCheckUtils]: 37: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,566 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-08 08:14:26,567 INFO L290 TraceCheckUtils]: 39: Hoare triple {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,567 INFO L290 TraceCheckUtils]: 40: Hoare triple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} assume true; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,568 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} {22923#true} #725#return; {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,568 INFO L290 TraceCheckUtils]: 42: Hoare triple {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,568 INFO L290 TraceCheckUtils]: 43: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,568 INFO L290 TraceCheckUtils]: 44: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,569 INFO L290 TraceCheckUtils]: 45: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,569 INFO L290 TraceCheckUtils]: 46: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,569 INFO L290 TraceCheckUtils]: 47: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,569 INFO L290 TraceCheckUtils]: 48: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,570 INFO L290 TraceCheckUtils]: 49: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:26,570 INFO L290 TraceCheckUtils]: 50: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {22924#false} is VALID [2022-04-08 08:14:26,570 INFO L272 TraceCheckUtils]: 51: Hoare triple {22924#false} call errorFn(); {22924#false} is VALID [2022-04-08 08:14:26,570 INFO L290 TraceCheckUtils]: 52: Hoare triple {22924#false} assume !false; {22924#false} is VALID [2022-04-08 08:14:26,570 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:26,570 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:26,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1029122366] [2022-04-08 08:14:26,571 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1029122366] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:26,571 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:26,571 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 08:14:26,571 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:26,571 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [286470900] [2022-04-08 08:14:26,571 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [286470900] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:26,571 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:26,571 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 08:14:26,571 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1645667944] [2022-04-08 08:14:26,571 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:26,571 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 53 [2022-04-08 08:14:26,572 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:26,572 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:26,600 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:26,600 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-08 08:14:26,600 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:26,600 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-08 08:14:26,601 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=105, Unknown=0, NotChecked=0, Total=132 [2022-04-08 08:14:26,601 INFO L87 Difference]: Start difference. First operand 238 states and 309 transitions. Second operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:29,448 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:29,449 INFO L93 Difference]: Finished difference Result 250 states and 321 transitions. [2022-04-08 08:14:29,449 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-04-08 08:14:29,449 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 53 [2022-04-08 08:14:29,449 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:29,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:29,451 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 297 transitions. [2022-04-08 08:14:29,451 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:29,452 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 297 transitions. [2022-04-08 08:14:29,452 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 11 states and 297 transitions. [2022-04-08 08:14:29,702 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 297 edges. 297 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:29,704 INFO L225 Difference]: With dead ends: 250 [2022-04-08 08:14:29,705 INFO L226 Difference]: Without dead ends: 210 [2022-04-08 08:14:29,705 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2022-04-08 08:14:29,705 INFO L913 BasicCegarLoop]: 244 mSDtfsCounter, 433 mSDsluCounter, 661 mSDsCounter, 0 mSdLazyCounter, 1249 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 433 SdHoareTripleChecker+Valid, 905 SdHoareTripleChecker+Invalid, 1323 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 1249 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:29,705 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [433 Valid, 905 Invalid, 1323 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 1249 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-04-08 08:14:29,706 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-04-08 08:14:30,029 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 210. [2022-04-08 08:14:30,030 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:30,030 INFO L82 GeneralOperation]: Start isEquivalent. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-08 08:14:30,030 INFO L74 IsIncluded]: Start isIncluded. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-08 08:14:30,031 INFO L87 Difference]: Start difference. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-08 08:14:30,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:30,041 INFO L93 Difference]: Finished difference Result 210 states and 273 transitions. [2022-04-08 08:14:30,041 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-08 08:14:30,042 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:30,042 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:30,042 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) Second operand 210 states. [2022-04-08 08:14:30,042 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) Second operand 210 states. [2022-04-08 08:14:30,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:30,046 INFO L93 Difference]: Finished difference Result 210 states and 273 transitions. [2022-04-08 08:14:30,046 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-08 08:14:30,046 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:30,046 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:30,046 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:30,046 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:30,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-08 08:14:30,050 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 273 transitions. [2022-04-08 08:14:30,050 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 273 transitions. Word has length 53 [2022-04-08 08:14:30,050 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:30,050 INFO L478 AbstractCegarLoop]: Abstraction has 210 states and 273 transitions. [2022-04-08 08:14:30,050 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:30,050 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 273 transitions. [2022-04-08 08:14:30,356 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 273 edges. 273 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:30,356 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-08 08:14:30,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-04-08 08:14:30,357 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:30,357 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:30,357 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-04-08 08:14:30,357 INFO L403 AbstractCegarLoop]: === Iteration 14 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:30,357 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:30,357 INFO L85 PathProgramCache]: Analyzing trace with hash -438914869, now seen corresponding path program 1 times [2022-04-08 08:14:30,357 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:30,357 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1496449953] [2022-04-08 08:14:30,358 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:30,358 INFO L85 PathProgramCache]: Analyzing trace with hash -438914869, now seen corresponding path program 2 times [2022-04-08 08:14:30,358 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:30,358 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1704639990] [2022-04-08 08:14:30,358 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:30,358 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:30,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:30,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:30,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:30,424 INFO L290 TraceCheckUtils]: 0: Hoare triple {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-08 08:14:30,425 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-08 08:14:30,425 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #783#return; {24319#true} is VALID [2022-04-08 08:14:30,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:30,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:30,446 INFO L290 TraceCheckUtils]: 0: Hoare triple {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-08 08:14:30,447 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-08 08:14:30,447 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #715#return; {24319#true} is VALID [2022-04-08 08:14:30,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:30,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:30,459 INFO L290 TraceCheckUtils]: 0: Hoare triple {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-08 08:14:30,459 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-08 08:14:30,459 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #717#return; {24319#true} is VALID [2022-04-08 08:14:30,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-08 08:14:30,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:30,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:30,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:30,524 INFO L290 TraceCheckUtils]: 0: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-08 08:14:30,524 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-08 08:14:30,524 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-08 08:14:30,524 INFO L290 TraceCheckUtils]: 3: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-08 08:14:30,524 INFO L290 TraceCheckUtils]: 4: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-08 08:14:30,524 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-08 08:14:30,525 INFO L290 TraceCheckUtils]: 6: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-08 08:14:30,525 INFO L290 TraceCheckUtils]: 7: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 08:14:30,525 INFO L290 TraceCheckUtils]: 8: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,525 INFO L290 TraceCheckUtils]: 9: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,526 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,527 INFO L290 TraceCheckUtils]: 0: Hoare triple {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {24319#true} is VALID [2022-04-08 08:14:30,527 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume !(0 == ~irpStack__MinorFunction~0); {24319#true} is VALID [2022-04-08 08:14:30,527 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} assume 23 == ~irpStack__MinorFunction~0; {24319#true} is VALID [2022-04-08 08:14:30,527 INFO L290 TraceCheckUtils]: 3: Hoare triple {24319#true} ~devExt__SurpriseRemoved~0 := 1; {24319#true} is VALID [2022-04-08 08:14:30,527 INFO L290 TraceCheckUtils]: 4: Hoare triple {24319#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {24319#true} is VALID [2022-04-08 08:14:30,531 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} #t~post12 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post12;havoc #t~post12;#t~post13 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post13;havoc #t~post13; {24319#true} is VALID [2022-04-08 08:14:30,532 INFO L272 TraceCheckUtils]: 6: Hoare triple {24319#true} call #t~ret14 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:30,532 INFO L290 TraceCheckUtils]: 7: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-08 08:14:30,532 INFO L290 TraceCheckUtils]: 8: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-08 08:14:30,532 INFO L290 TraceCheckUtils]: 9: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-08 08:14:30,532 INFO L290 TraceCheckUtils]: 10: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-08 08:14:30,532 INFO L290 TraceCheckUtils]: 11: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-08 08:14:30,532 INFO L290 TraceCheckUtils]: 12: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-08 08:14:30,533 INFO L290 TraceCheckUtils]: 13: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-08 08:14:30,533 INFO L290 TraceCheckUtils]: 14: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 08:14:30,533 INFO L290 TraceCheckUtils]: 15: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,533 INFO L290 TraceCheckUtils]: 16: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,534 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,534 INFO L290 TraceCheckUtils]: 18: Hoare triple {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;~status~0 := #t~ret14;havoc #t~ret14; {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,535 INFO L290 TraceCheckUtils]: 19: Hoare triple {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,535 INFO L290 TraceCheckUtils]: 20: Hoare triple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,535 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {24319#true} #723#return; {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,536 INFO L272 TraceCheckUtils]: 0: Hoare triple {24319#true} call ULTIMATE.init(); {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:30,537 INFO L290 TraceCheckUtils]: 1: Hoare triple {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-08 08:14:30,537 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-08 08:14:30,537 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {24319#true} {24319#true} #783#return; {24319#true} is VALID [2022-04-08 08:14:30,537 INFO L272 TraceCheckUtils]: 4: Hoare triple {24319#true} call #t~ret81 := main(); {24319#true} is VALID [2022-04-08 08:14:30,537 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {24319#true} is VALID [2022-04-08 08:14:30,538 INFO L272 TraceCheckUtils]: 6: Hoare triple {24319#true} call _BLAST_init(); {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:30,538 INFO L290 TraceCheckUtils]: 7: Hoare triple {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-08 08:14:30,538 INFO L290 TraceCheckUtils]: 8: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-08 08:14:30,538 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {24319#true} {24319#true} #715#return; {24319#true} is VALID [2022-04-08 08:14:30,538 INFO L290 TraceCheckUtils]: 10: Hoare triple {24319#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-08 08:14:30,538 INFO L290 TraceCheckUtils]: 11: Hoare triple {24319#true} assume !(0 == ~irp_choice~0); {24319#true} is VALID [2022-04-08 08:14:30,539 INFO L272 TraceCheckUtils]: 12: Hoare triple {24319#true} call stub_driver_init(); {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:30,539 INFO L290 TraceCheckUtils]: 13: Hoare triple {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-08 08:14:30,539 INFO L290 TraceCheckUtils]: 14: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-08 08:14:30,539 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {24319#true} {24319#true} #717#return; {24319#true} is VALID [2022-04-08 08:14:30,539 INFO L290 TraceCheckUtils]: 16: Hoare triple {24319#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {24319#true} is VALID [2022-04-08 08:14:30,539 INFO L290 TraceCheckUtils]: 17: Hoare triple {24319#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {24319#true} is VALID [2022-04-08 08:14:30,539 INFO L290 TraceCheckUtils]: 18: Hoare triple {24319#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {24319#true} is VALID [2022-04-08 08:14:30,539 INFO L290 TraceCheckUtils]: 19: Hoare triple {24319#true} assume 3 == ~tmp_ndt_3~0; {24319#true} is VALID [2022-04-08 08:14:30,540 INFO L272 TraceCheckUtils]: 20: Hoare triple {24319#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:30,540 INFO L290 TraceCheckUtils]: 21: Hoare triple {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {24319#true} is VALID [2022-04-08 08:14:30,540 INFO L290 TraceCheckUtils]: 22: Hoare triple {24319#true} assume !(0 == ~irpStack__MinorFunction~0); {24319#true} is VALID [2022-04-08 08:14:30,540 INFO L290 TraceCheckUtils]: 23: Hoare triple {24319#true} assume 23 == ~irpStack__MinorFunction~0; {24319#true} is VALID [2022-04-08 08:14:30,540 INFO L290 TraceCheckUtils]: 24: Hoare triple {24319#true} ~devExt__SurpriseRemoved~0 := 1; {24319#true} is VALID [2022-04-08 08:14:30,540 INFO L290 TraceCheckUtils]: 25: Hoare triple {24319#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {24319#true} is VALID [2022-04-08 08:14:30,540 INFO L290 TraceCheckUtils]: 26: Hoare triple {24319#true} #t~post12 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post12;havoc #t~post12;#t~post13 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post13;havoc #t~post13; {24319#true} is VALID [2022-04-08 08:14:30,541 INFO L272 TraceCheckUtils]: 27: Hoare triple {24319#true} call #t~ret14 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:30,541 INFO L290 TraceCheckUtils]: 28: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-08 08:14:30,541 INFO L290 TraceCheckUtils]: 29: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-08 08:14:30,541 INFO L290 TraceCheckUtils]: 30: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-08 08:14:30,541 INFO L290 TraceCheckUtils]: 31: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-08 08:14:30,541 INFO L290 TraceCheckUtils]: 32: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-08 08:14:30,541 INFO L290 TraceCheckUtils]: 33: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-08 08:14:30,541 INFO L290 TraceCheckUtils]: 34: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-08 08:14:30,541 INFO L290 TraceCheckUtils]: 35: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 08:14:30,542 INFO L290 TraceCheckUtils]: 36: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,542 INFO L290 TraceCheckUtils]: 37: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,542 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,543 INFO L290 TraceCheckUtils]: 39: Hoare triple {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;~status~0 := #t~ret14;havoc #t~ret14; {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,543 INFO L290 TraceCheckUtils]: 40: Hoare triple {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,543 INFO L290 TraceCheckUtils]: 41: Hoare triple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,544 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {24319#true} #723#return; {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,544 INFO L290 TraceCheckUtils]: 43: Hoare triple {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,544 INFO L290 TraceCheckUtils]: 44: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,545 INFO L290 TraceCheckUtils]: 45: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,545 INFO L290 TraceCheckUtils]: 46: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,545 INFO L290 TraceCheckUtils]: 47: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,545 INFO L290 TraceCheckUtils]: 48: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,546 INFO L290 TraceCheckUtils]: 49: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,546 INFO L290 TraceCheckUtils]: 50: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:30,546 INFO L290 TraceCheckUtils]: 51: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {24320#false} is VALID [2022-04-08 08:14:30,546 INFO L272 TraceCheckUtils]: 52: Hoare triple {24320#false} call errorFn(); {24320#false} is VALID [2022-04-08 08:14:30,546 INFO L290 TraceCheckUtils]: 53: Hoare triple {24320#false} assume !false; {24320#false} is VALID [2022-04-08 08:14:30,546 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:30,547 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:30,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1704639990] [2022-04-08 08:14:30,551 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1704639990] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:30,551 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:30,551 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-08 08:14:30,551 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:30,552 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1496449953] [2022-04-08 08:14:30,552 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1496449953] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:30,552 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:30,552 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-08 08:14:30,552 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [546784003] [2022-04-08 08:14:30,552 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:30,555 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 54 [2022-04-08 08:14:30,555 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:30,555 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:30,584 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 54 edges. 54 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:30,584 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-08 08:14:30,585 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:30,586 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-08 08:14:30,586 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-04-08 08:14:30,586 INFO L87 Difference]: Start difference. First operand 210 states and 273 transitions. Second operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:33,376 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:33,376 INFO L93 Difference]: Finished difference Result 226 states and 289 transitions. [2022-04-08 08:14:33,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-08 08:14:33,377 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 54 [2022-04-08 08:14:33,377 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:33,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:33,378 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 265 transitions. [2022-04-08 08:14:33,379 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:33,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 265 transitions. [2022-04-08 08:14:33,380 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 265 transitions. [2022-04-08 08:14:33,613 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 265 edges. 265 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:33,616 INFO L225 Difference]: With dead ends: 226 [2022-04-08 08:14:33,616 INFO L226 Difference]: Without dead ends: 205 [2022-04-08 08:14:33,617 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-04-08 08:14:33,617 INFO L913 BasicCegarLoop]: 214 mSDtfsCounter, 246 mSDsluCounter, 625 mSDsCounter, 0 mSdLazyCounter, 1286 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 246 SdHoareTripleChecker+Valid, 839 SdHoareTripleChecker+Invalid, 1337 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 1286 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:33,617 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [246 Valid, 839 Invalid, 1337 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 1286 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-08 08:14:33,618 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2022-04-08 08:14:33,912 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 205. [2022-04-08 08:14:33,912 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:33,913 INFO L82 GeneralOperation]: Start isEquivalent. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-08 08:14:33,913 INFO L74 IsIncluded]: Start isIncluded. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-08 08:14:33,913 INFO L87 Difference]: Start difference. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-08 08:14:33,916 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:33,916 INFO L93 Difference]: Finished difference Result 205 states and 266 transitions. [2022-04-08 08:14:33,916 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-08 08:14:33,916 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:33,916 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:33,917 INFO L74 IsIncluded]: Start isIncluded. First operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) Second operand 205 states. [2022-04-08 08:14:33,917 INFO L87 Difference]: Start difference. First operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) Second operand 205 states. [2022-04-08 08:14:33,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:33,920 INFO L93 Difference]: Finished difference Result 205 states and 266 transitions. [2022-04-08 08:14:33,920 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-08 08:14:33,920 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:33,920 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:33,920 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:33,920 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:33,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-08 08:14:33,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 205 states to 205 states and 266 transitions. [2022-04-08 08:14:33,925 INFO L78 Accepts]: Start accepts. Automaton has 205 states and 266 transitions. Word has length 54 [2022-04-08 08:14:33,925 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:33,925 INFO L478 AbstractCegarLoop]: Abstraction has 205 states and 266 transitions. [2022-04-08 08:14:33,925 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:33,925 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 205 states and 266 transitions. [2022-04-08 08:14:34,266 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 266 edges. 266 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:34,266 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-08 08:14:34,267 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-08 08:14:34,267 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:34,267 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:34,267 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-04-08 08:14:34,267 INFO L403 AbstractCegarLoop]: === Iteration 15 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:34,268 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:34,268 INFO L85 PathProgramCache]: Analyzing trace with hash 432963036, now seen corresponding path program 1 times [2022-04-08 08:14:34,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:34,268 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1621077194] [2022-04-08 08:14:34,268 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:34,268 INFO L85 PathProgramCache]: Analyzing trace with hash 432963036, now seen corresponding path program 2 times [2022-04-08 08:14:34,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:34,268 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [818474487] [2022-04-08 08:14:34,268 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:34,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:34,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:34,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:34,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:34,350 INFO L290 TraceCheckUtils]: 0: Hoare triple {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-08 08:14:34,350 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 08:14:34,350 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #783#return; {25653#true} is VALID [2022-04-08 08:14:34,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:34,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:34,375 INFO L290 TraceCheckUtils]: 0: Hoare triple {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-08 08:14:34,375 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 08:14:34,375 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #715#return; {25653#true} is VALID [2022-04-08 08:14:34,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:34,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:34,392 INFO L290 TraceCheckUtils]: 0: Hoare triple {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-08 08:14:34,392 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 08:14:34,392 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #717#return; {25653#true} is VALID [2022-04-08 08:14:34,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-08 08:14:34,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:34,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-08 08:14:34,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:34,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-08 08:14:34,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:34,458 INFO L290 TraceCheckUtils]: 0: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-08 08:14:34,459 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 08:14:34,459 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-08 08:14:34,459 INFO L290 TraceCheckUtils]: 0: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-08 08:14:34,459 INFO L272 TraceCheckUtils]: 1: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:34,460 INFO L290 TraceCheckUtils]: 2: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-08 08:14:34,460 INFO L290 TraceCheckUtils]: 3: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 08:14:34,460 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-08 08:14:34,460 INFO L290 TraceCheckUtils]: 5: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-08 08:14:34,460 INFO L290 TraceCheckUtils]: 6: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 08:14:34,460 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-08 08:14:34,460 INFO L290 TraceCheckUtils]: 0: Hoare triple {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {25653#true} is VALID [2022-04-08 08:14:34,460 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume 0 != ~compRegistered~0; {25653#true} is VALID [2022-04-08 08:14:34,461 INFO L272 TraceCheckUtils]: 2: Hoare triple {25653#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:34,461 INFO L290 TraceCheckUtils]: 3: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-08 08:14:34,462 INFO L272 TraceCheckUtils]: 4: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:34,462 INFO L290 TraceCheckUtils]: 5: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-08 08:14:34,462 INFO L290 TraceCheckUtils]: 6: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 08:14:34,462 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-08 08:14:34,462 INFO L290 TraceCheckUtils]: 8: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-08 08:14:34,462 INFO L290 TraceCheckUtils]: 9: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 08:14:34,462 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-08 08:14:34,462 INFO L290 TraceCheckUtils]: 11: Hoare triple {25653#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {25653#true} is VALID [2022-04-08 08:14:34,462 INFO L290 TraceCheckUtils]: 12: Hoare triple {25653#true} assume !(-1073741802 == ~__cil_tmp7~0); {25653#true} is VALID [2022-04-08 08:14:34,462 INFO L290 TraceCheckUtils]: 13: Hoare triple {25653#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {25653#true} is VALID [2022-04-08 08:14:34,462 INFO L290 TraceCheckUtils]: 14: Hoare triple {25653#true} assume 0 == ~tmp_ndt_6~0; {25653#true} is VALID [2022-04-08 08:14:34,463 INFO L290 TraceCheckUtils]: 15: Hoare triple {25653#true} ~returnVal2~0 := 0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:34,463 INFO L290 TraceCheckUtils]: 16: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:34,463 INFO L290 TraceCheckUtils]: 17: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 08:14:34,464 INFO L290 TraceCheckUtils]: 18: Hoare triple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 08:14:34,464 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {25653#true} #755#return; {25684#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-08 08:14:34,466 INFO L272 TraceCheckUtils]: 0: Hoare triple {25653#true} call ULTIMATE.init(); {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:34,466 INFO L290 TraceCheckUtils]: 1: Hoare triple {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-08 08:14:34,466 INFO L290 TraceCheckUtils]: 2: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 08:14:34,466 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {25653#true} {25653#true} #783#return; {25653#true} is VALID [2022-04-08 08:14:34,466 INFO L272 TraceCheckUtils]: 4: Hoare triple {25653#true} call #t~ret81 := main(); {25653#true} is VALID [2022-04-08 08:14:34,466 INFO L290 TraceCheckUtils]: 5: Hoare triple {25653#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {25653#true} is VALID [2022-04-08 08:14:34,467 INFO L272 TraceCheckUtils]: 6: Hoare triple {25653#true} call _BLAST_init(); {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:34,467 INFO L290 TraceCheckUtils]: 7: Hoare triple {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-08 08:14:34,467 INFO L290 TraceCheckUtils]: 8: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 08:14:34,467 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {25653#true} {25653#true} #715#return; {25653#true} is VALID [2022-04-08 08:14:34,467 INFO L290 TraceCheckUtils]: 10: Hoare triple {25653#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-08 08:14:34,467 INFO L290 TraceCheckUtils]: 11: Hoare triple {25653#true} assume !(0 == ~irp_choice~0); {25653#true} is VALID [2022-04-08 08:14:34,468 INFO L272 TraceCheckUtils]: 12: Hoare triple {25653#true} call stub_driver_init(); {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:34,468 INFO L290 TraceCheckUtils]: 13: Hoare triple {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-08 08:14:34,468 INFO L290 TraceCheckUtils]: 14: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 08:14:34,468 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {25653#true} {25653#true} #717#return; {25653#true} is VALID [2022-04-08 08:14:34,468 INFO L290 TraceCheckUtils]: 16: Hoare triple {25653#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {25653#true} is VALID [2022-04-08 08:14:34,468 INFO L290 TraceCheckUtils]: 17: Hoare triple {25653#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {25653#true} is VALID [2022-04-08 08:14:34,468 INFO L290 TraceCheckUtils]: 18: Hoare triple {25653#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {25653#true} is VALID [2022-04-08 08:14:34,468 INFO L290 TraceCheckUtils]: 19: Hoare triple {25653#true} assume 3 == ~tmp_ndt_3~0; {25653#true} is VALID [2022-04-08 08:14:34,468 INFO L272 TraceCheckUtils]: 20: Hoare triple {25653#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {25653#true} is VALID [2022-04-08 08:14:34,468 INFO L290 TraceCheckUtils]: 21: Hoare triple {25653#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {25653#true} is VALID [2022-04-08 08:14:34,469 INFO L290 TraceCheckUtils]: 22: Hoare triple {25653#true} assume 0 == ~irpStack__MinorFunction~0; {25653#true} is VALID [2022-04-08 08:14:34,469 INFO L290 TraceCheckUtils]: 23: Hoare triple {25653#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {25653#true} is VALID [2022-04-08 08:14:34,469 INFO L290 TraceCheckUtils]: 24: Hoare triple {25653#true} assume !(~s~0 != ~NP~0); {25653#true} is VALID [2022-04-08 08:14:34,469 INFO L290 TraceCheckUtils]: 25: Hoare triple {25653#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {25653#true} is VALID [2022-04-08 08:14:34,469 INFO L290 TraceCheckUtils]: 26: Hoare triple {25653#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {25653#true} is VALID [2022-04-08 08:14:34,469 INFO L272 TraceCheckUtils]: 27: Hoare triple {25653#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:34,469 INFO L290 TraceCheckUtils]: 28: Hoare triple {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {25653#true} is VALID [2022-04-08 08:14:34,470 INFO L290 TraceCheckUtils]: 29: Hoare triple {25653#true} assume 0 != ~compRegistered~0; {25653#true} is VALID [2022-04-08 08:14:34,470 INFO L272 TraceCheckUtils]: 30: Hoare triple {25653#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:34,470 INFO L290 TraceCheckUtils]: 31: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-08 08:14:34,471 INFO L272 TraceCheckUtils]: 32: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:34,471 INFO L290 TraceCheckUtils]: 33: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-08 08:14:34,471 INFO L290 TraceCheckUtils]: 34: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 08:14:34,471 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-08 08:14:34,471 INFO L290 TraceCheckUtils]: 36: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-08 08:14:34,471 INFO L290 TraceCheckUtils]: 37: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 08:14:34,471 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-08 08:14:34,471 INFO L290 TraceCheckUtils]: 39: Hoare triple {25653#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {25653#true} is VALID [2022-04-08 08:14:34,471 INFO L290 TraceCheckUtils]: 40: Hoare triple {25653#true} assume !(-1073741802 == ~__cil_tmp7~0); {25653#true} is VALID [2022-04-08 08:14:34,471 INFO L290 TraceCheckUtils]: 41: Hoare triple {25653#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {25653#true} is VALID [2022-04-08 08:14:34,471 INFO L290 TraceCheckUtils]: 42: Hoare triple {25653#true} assume 0 == ~tmp_ndt_6~0; {25653#true} is VALID [2022-04-08 08:14:34,472 INFO L290 TraceCheckUtils]: 43: Hoare triple {25653#true} ~returnVal2~0 := 0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:34,472 INFO L290 TraceCheckUtils]: 44: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:34,472 INFO L290 TraceCheckUtils]: 45: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 08:14:34,473 INFO L290 TraceCheckUtils]: 46: Hoare triple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 08:14:34,473 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {25653#true} #755#return; {25684#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-08 08:14:34,474 INFO L290 TraceCheckUtils]: 48: Hoare triple {25684#(= |KbFilter_PnP_#t~ret10| 0)} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {25685#(= KbFilter_PnP_~__cil_tmp23~0 0)} is VALID [2022-04-08 08:14:34,474 INFO L290 TraceCheckUtils]: 49: Hoare triple {25685#(= KbFilter_PnP_~__cil_tmp23~0 0)} assume 259 == ~__cil_tmp23~0; {25654#false} is VALID [2022-04-08 08:14:34,474 INFO L272 TraceCheckUtils]: 50: Hoare triple {25654#false} call #t~ret11 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {25654#false} is VALID [2022-04-08 08:14:34,474 INFO L290 TraceCheckUtils]: 51: Hoare triple {25654#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {25654#false} is VALID [2022-04-08 08:14:34,474 INFO L290 TraceCheckUtils]: 52: Hoare triple {25654#false} assume !(~s~0 == ~MPR3~0); {25654#false} is VALID [2022-04-08 08:14:34,474 INFO L290 TraceCheckUtils]: 53: Hoare triple {25654#false} assume !(1 == ~customIrp~0); {25654#false} is VALID [2022-04-08 08:14:34,474 INFO L290 TraceCheckUtils]: 54: Hoare triple {25654#false} assume ~s~0 == ~MPR3~0; {25654#false} is VALID [2022-04-08 08:14:34,475 INFO L272 TraceCheckUtils]: 55: Hoare triple {25654#false} call errorFn(); {25654#false} is VALID [2022-04-08 08:14:34,475 INFO L290 TraceCheckUtils]: 56: Hoare triple {25654#false} assume !false; {25654#false} is VALID [2022-04-08 08:14:34,475 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:34,475 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:34,475 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [818474487] [2022-04-08 08:14:34,475 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [818474487] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:34,475 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:34,475 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-08 08:14:34,475 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:34,476 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1621077194] [2022-04-08 08:14:34,476 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1621077194] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:34,476 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:34,476 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-08 08:14:34,476 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1156704195] [2022-04-08 08:14:34,476 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:34,476 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-08 08:14:34,477 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:34,477 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:34,513 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:34,513 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-08 08:14:34,513 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:34,513 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-08 08:14:34,514 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-08 08:14:34,514 INFO L87 Difference]: Start difference. First operand 205 states and 266 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:36,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:36,586 INFO L93 Difference]: Finished difference Result 263 states and 337 transitions. [2022-04-08 08:14:36,586 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-08 08:14:36,586 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-08 08:14:36,586 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:36,586 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:36,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 302 transitions. [2022-04-08 08:14:36,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:36,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 302 transitions. [2022-04-08 08:14:36,590 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 302 transitions. [2022-04-08 08:14:36,833 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 302 edges. 302 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:36,836 INFO L225 Difference]: With dead ends: 263 [2022-04-08 08:14:36,836 INFO L226 Difference]: Without dead ends: 222 [2022-04-08 08:14:36,836 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-04-08 08:14:36,837 INFO L913 BasicCegarLoop]: 203 mSDtfsCounter, 155 mSDsluCounter, 448 mSDsCounter, 0 mSdLazyCounter, 796 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 651 SdHoareTripleChecker+Invalid, 837 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 796 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:36,837 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [155 Valid, 651 Invalid, 837 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 796 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-08 08:14:36,837 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2022-04-08 08:14:37,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 210. [2022-04-08 08:14:37,179 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:37,180 INFO L82 GeneralOperation]: Start isEquivalent. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 08:14:37,180 INFO L74 IsIncluded]: Start isIncluded. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 08:14:37,180 INFO L87 Difference]: Start difference. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 08:14:37,183 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:37,183 INFO L93 Difference]: Finished difference Result 222 states and 287 transitions. [2022-04-08 08:14:37,183 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 287 transitions. [2022-04-08 08:14:37,184 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:37,184 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:37,184 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 222 states. [2022-04-08 08:14:37,184 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 222 states. [2022-04-08 08:14:37,187 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:37,187 INFO L93 Difference]: Finished difference Result 222 states and 287 transitions. [2022-04-08 08:14:37,188 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 287 transitions. [2022-04-08 08:14:37,188 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:37,188 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:37,188 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:37,188 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:37,188 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 08:14:37,191 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 271 transitions. [2022-04-08 08:14:37,191 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 271 transitions. Word has length 57 [2022-04-08 08:14:37,191 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:37,192 INFO L478 AbstractCegarLoop]: Abstraction has 210 states and 271 transitions. [2022-04-08 08:14:37,192 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:37,192 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 271 transitions. [2022-04-08 08:14:37,515 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 271 edges. 271 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:37,516 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 271 transitions. [2022-04-08 08:14:37,516 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-08 08:14:37,516 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:37,516 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:37,516 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-04-08 08:14:37,517 INFO L403 AbstractCegarLoop]: === Iteration 16 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:37,517 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:37,517 INFO L85 PathProgramCache]: Analyzing trace with hash 1039954733, now seen corresponding path program 1 times [2022-04-08 08:14:37,517 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:37,517 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [258638094] [2022-04-08 08:14:37,517 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:37,517 INFO L85 PathProgramCache]: Analyzing trace with hash 1039954733, now seen corresponding path program 2 times [2022-04-08 08:14:37,517 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:37,517 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1190488219] [2022-04-08 08:14:37,518 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:37,518 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:37,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:37,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:37,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:37,583 INFO L290 TraceCheckUtils]: 0: Hoare triple {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-08 08:14:37,583 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 08:14:37,584 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #783#return; {27104#true} is VALID [2022-04-08 08:14:37,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:37,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:37,604 INFO L290 TraceCheckUtils]: 0: Hoare triple {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-08 08:14:37,604 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 08:14:37,604 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #715#return; {27104#true} is VALID [2022-04-08 08:14:37,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:37,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:37,616 INFO L290 TraceCheckUtils]: 0: Hoare triple {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-08 08:14:37,617 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 08:14:37,617 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #717#return; {27104#true} is VALID [2022-04-08 08:14:37,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-08 08:14:37,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:37,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-08 08:14:37,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:37,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-08 08:14:37,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:37,669 INFO L290 TraceCheckUtils]: 0: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-08 08:14:37,669 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 08:14:37,669 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-08 08:14:37,669 INFO L290 TraceCheckUtils]: 0: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-08 08:14:37,670 INFO L272 TraceCheckUtils]: 1: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:37,670 INFO L290 TraceCheckUtils]: 2: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-08 08:14:37,670 INFO L290 TraceCheckUtils]: 3: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 08:14:37,670 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-08 08:14:37,670 INFO L290 TraceCheckUtils]: 5: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-08 08:14:37,670 INFO L290 TraceCheckUtils]: 6: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 08:14:37,670 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-08 08:14:37,670 INFO L290 TraceCheckUtils]: 0: Hoare triple {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {27104#true} is VALID [2022-04-08 08:14:37,670 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume 0 != ~compRegistered~0; {27104#true} is VALID [2022-04-08 08:14:37,671 INFO L272 TraceCheckUtils]: 2: Hoare triple {27104#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:37,671 INFO L290 TraceCheckUtils]: 3: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-08 08:14:37,672 INFO L272 TraceCheckUtils]: 4: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:37,672 INFO L290 TraceCheckUtils]: 5: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-08 08:14:37,672 INFO L290 TraceCheckUtils]: 6: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 08:14:37,672 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-08 08:14:37,672 INFO L290 TraceCheckUtils]: 8: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-08 08:14:37,672 INFO L290 TraceCheckUtils]: 9: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 08:14:37,672 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-08 08:14:37,672 INFO L290 TraceCheckUtils]: 11: Hoare triple {27104#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {27104#true} is VALID [2022-04-08 08:14:37,672 INFO L290 TraceCheckUtils]: 12: Hoare triple {27104#true} assume !(-1073741802 == ~__cil_tmp7~0); {27104#true} is VALID [2022-04-08 08:14:37,672 INFO L290 TraceCheckUtils]: 13: Hoare triple {27104#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {27104#true} is VALID [2022-04-08 08:14:37,672 INFO L290 TraceCheckUtils]: 14: Hoare triple {27104#true} assume 0 == ~tmp_ndt_6~0; {27104#true} is VALID [2022-04-08 08:14:37,673 INFO L290 TraceCheckUtils]: 15: Hoare triple {27104#true} ~returnVal2~0 := 0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:37,673 INFO L290 TraceCheckUtils]: 16: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:37,673 INFO L290 TraceCheckUtils]: 17: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 08:14:37,674 INFO L290 TraceCheckUtils]: 18: Hoare triple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 08:14:37,674 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {27104#true} #755#return; {27135#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-08 08:14:37,675 INFO L272 TraceCheckUtils]: 0: Hoare triple {27104#true} call ULTIMATE.init(); {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:37,675 INFO L290 TraceCheckUtils]: 1: Hoare triple {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-08 08:14:37,676 INFO L290 TraceCheckUtils]: 2: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 08:14:37,676 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {27104#true} {27104#true} #783#return; {27104#true} is VALID [2022-04-08 08:14:37,676 INFO L272 TraceCheckUtils]: 4: Hoare triple {27104#true} call #t~ret81 := main(); {27104#true} is VALID [2022-04-08 08:14:37,676 INFO L290 TraceCheckUtils]: 5: Hoare triple {27104#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {27104#true} is VALID [2022-04-08 08:14:37,676 INFO L272 TraceCheckUtils]: 6: Hoare triple {27104#true} call _BLAST_init(); {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:37,677 INFO L290 TraceCheckUtils]: 7: Hoare triple {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-08 08:14:37,677 INFO L290 TraceCheckUtils]: 8: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 08:14:37,677 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {27104#true} {27104#true} #715#return; {27104#true} is VALID [2022-04-08 08:14:37,677 INFO L290 TraceCheckUtils]: 10: Hoare triple {27104#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-08 08:14:37,677 INFO L290 TraceCheckUtils]: 11: Hoare triple {27104#true} assume !(0 == ~irp_choice~0); {27104#true} is VALID [2022-04-08 08:14:37,677 INFO L272 TraceCheckUtils]: 12: Hoare triple {27104#true} call stub_driver_init(); {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:37,677 INFO L290 TraceCheckUtils]: 13: Hoare triple {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-08 08:14:37,678 INFO L290 TraceCheckUtils]: 14: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 08:14:37,678 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {27104#true} {27104#true} #717#return; {27104#true} is VALID [2022-04-08 08:14:37,678 INFO L290 TraceCheckUtils]: 16: Hoare triple {27104#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {27104#true} is VALID [2022-04-08 08:14:37,678 INFO L290 TraceCheckUtils]: 17: Hoare triple {27104#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {27104#true} is VALID [2022-04-08 08:14:37,678 INFO L290 TraceCheckUtils]: 18: Hoare triple {27104#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {27104#true} is VALID [2022-04-08 08:14:37,678 INFO L290 TraceCheckUtils]: 19: Hoare triple {27104#true} assume 3 == ~tmp_ndt_3~0; {27104#true} is VALID [2022-04-08 08:14:37,678 INFO L272 TraceCheckUtils]: 20: Hoare triple {27104#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {27104#true} is VALID [2022-04-08 08:14:37,678 INFO L290 TraceCheckUtils]: 21: Hoare triple {27104#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {27104#true} is VALID [2022-04-08 08:14:37,678 INFO L290 TraceCheckUtils]: 22: Hoare triple {27104#true} assume 0 == ~irpStack__MinorFunction~0; {27104#true} is VALID [2022-04-08 08:14:37,678 INFO L290 TraceCheckUtils]: 23: Hoare triple {27104#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {27104#true} is VALID [2022-04-08 08:14:37,678 INFO L290 TraceCheckUtils]: 24: Hoare triple {27104#true} assume !(~s~0 != ~NP~0); {27104#true} is VALID [2022-04-08 08:14:37,678 INFO L290 TraceCheckUtils]: 25: Hoare triple {27104#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {27104#true} is VALID [2022-04-08 08:14:37,678 INFO L290 TraceCheckUtils]: 26: Hoare triple {27104#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {27104#true} is VALID [2022-04-08 08:14:37,679 INFO L272 TraceCheckUtils]: 27: Hoare triple {27104#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:37,679 INFO L290 TraceCheckUtils]: 28: Hoare triple {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {27104#true} is VALID [2022-04-08 08:14:37,679 INFO L290 TraceCheckUtils]: 29: Hoare triple {27104#true} assume 0 != ~compRegistered~0; {27104#true} is VALID [2022-04-08 08:14:37,680 INFO L272 TraceCheckUtils]: 30: Hoare triple {27104#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:37,680 INFO L290 TraceCheckUtils]: 31: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-08 08:14:37,680 INFO L272 TraceCheckUtils]: 32: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:37,680 INFO L290 TraceCheckUtils]: 33: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-08 08:14:37,680 INFO L290 TraceCheckUtils]: 34: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 08:14:37,680 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-08 08:14:37,680 INFO L290 TraceCheckUtils]: 36: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-08 08:14:37,680 INFO L290 TraceCheckUtils]: 37: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 08:14:37,681 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-08 08:14:37,681 INFO L290 TraceCheckUtils]: 39: Hoare triple {27104#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {27104#true} is VALID [2022-04-08 08:14:37,681 INFO L290 TraceCheckUtils]: 40: Hoare triple {27104#true} assume !(-1073741802 == ~__cil_tmp7~0); {27104#true} is VALID [2022-04-08 08:14:37,681 INFO L290 TraceCheckUtils]: 41: Hoare triple {27104#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {27104#true} is VALID [2022-04-08 08:14:37,681 INFO L290 TraceCheckUtils]: 42: Hoare triple {27104#true} assume 0 == ~tmp_ndt_6~0; {27104#true} is VALID [2022-04-08 08:14:37,681 INFO L290 TraceCheckUtils]: 43: Hoare triple {27104#true} ~returnVal2~0 := 0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:37,681 INFO L290 TraceCheckUtils]: 44: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:37,682 INFO L290 TraceCheckUtils]: 45: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 08:14:37,682 INFO L290 TraceCheckUtils]: 46: Hoare triple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 08:14:37,683 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {27104#true} #755#return; {27135#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-08 08:14:37,683 INFO L290 TraceCheckUtils]: 48: Hoare triple {27135#(= |KbFilter_PnP_#t~ret10| 0)} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {27136#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-08 08:14:37,683 INFO L290 TraceCheckUtils]: 49: Hoare triple {27136#(= KbFilter_PnP_~status~0 0)} assume !(259 == ~__cil_tmp23~0); {27136#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-08 08:14:37,683 INFO L290 TraceCheckUtils]: 50: Hoare triple {27136#(= KbFilter_PnP_~status~0 0)} assume !(~status~0 >= 0); {27105#false} is VALID [2022-04-08 08:14:37,684 INFO L290 TraceCheckUtils]: 51: Hoare triple {27105#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {27105#false} is VALID [2022-04-08 08:14:37,684 INFO L272 TraceCheckUtils]: 52: Hoare triple {27105#false} call IofCompleteRequest(~Irp, 0); {27105#false} is VALID [2022-04-08 08:14:37,684 INFO L290 TraceCheckUtils]: 53: Hoare triple {27105#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {27105#false} is VALID [2022-04-08 08:14:37,684 INFO L290 TraceCheckUtils]: 54: Hoare triple {27105#false} assume !(~s~0 == ~NP~0); {27105#false} is VALID [2022-04-08 08:14:37,684 INFO L272 TraceCheckUtils]: 55: Hoare triple {27105#false} call errorFn(); {27105#false} is VALID [2022-04-08 08:14:37,684 INFO L290 TraceCheckUtils]: 56: Hoare triple {27105#false} assume !false; {27105#false} is VALID [2022-04-08 08:14:37,684 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:37,684 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:37,684 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1190488219] [2022-04-08 08:14:37,684 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1190488219] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:37,685 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:37,685 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-08 08:14:37,685 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:37,685 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [258638094] [2022-04-08 08:14:37,685 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [258638094] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:37,685 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:37,685 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-08 08:14:37,685 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1368068606] [2022-04-08 08:14:37,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:37,685 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-08 08:14:37,686 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:37,686 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:37,716 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:37,716 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-08 08:14:37,717 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:37,717 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-08 08:14:37,717 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-08 08:14:37,717 INFO L87 Difference]: Start difference. First operand 210 states and 271 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:39,774 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:39,774 INFO L93 Difference]: Finished difference Result 230 states and 294 transitions. [2022-04-08 08:14:39,775 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-04-08 08:14:39,775 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-08 08:14:39,775 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:39,775 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:39,777 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 273 transitions. [2022-04-08 08:14:39,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:39,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 273 transitions. [2022-04-08 08:14:39,778 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 15 states and 273 transitions. [2022-04-08 08:14:40,004 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 273 edges. 273 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:40,007 INFO L225 Difference]: With dead ends: 230 [2022-04-08 08:14:40,008 INFO L226 Difference]: Without dead ends: 223 [2022-04-08 08:14:40,008 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=77, Invalid=265, Unknown=0, NotChecked=0, Total=342 [2022-04-08 08:14:40,008 INFO L913 BasicCegarLoop]: 202 mSDtfsCounter, 320 mSDsluCounter, 412 mSDsCounter, 0 mSdLazyCounter, 702 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 320 SdHoareTripleChecker+Valid, 614 SdHoareTripleChecker+Invalid, 775 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 702 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:40,009 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [320 Valid, 614 Invalid, 775 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 702 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-08 08:14:40,009 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2022-04-08 08:14:40,403 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 211. [2022-04-08 08:14:40,403 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:40,404 INFO L82 GeneralOperation]: Start isEquivalent. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 08:14:40,404 INFO L74 IsIncluded]: Start isIncluded. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 08:14:40,404 INFO L87 Difference]: Start difference. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 08:14:40,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:40,407 INFO L93 Difference]: Finished difference Result 223 states and 287 transitions. [2022-04-08 08:14:40,407 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 287 transitions. [2022-04-08 08:14:40,407 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:40,407 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:40,408 INFO L74 IsIncluded]: Start isIncluded. First operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 223 states. [2022-04-08 08:14:40,408 INFO L87 Difference]: Start difference. First operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 223 states. [2022-04-08 08:14:40,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:40,411 INFO L93 Difference]: Finished difference Result 223 states and 287 transitions. [2022-04-08 08:14:40,411 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 287 transitions. [2022-04-08 08:14:40,411 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:40,411 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:40,411 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:40,411 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:40,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 08:14:40,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 272 transitions. [2022-04-08 08:14:40,415 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 272 transitions. Word has length 57 [2022-04-08 08:14:40,415 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:40,415 INFO L478 AbstractCegarLoop]: Abstraction has 211 states and 272 transitions. [2022-04-08 08:14:40,415 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:40,415 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 211 states and 272 transitions. [2022-04-08 08:14:40,754 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 272 edges. 272 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:40,754 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 272 transitions. [2022-04-08 08:14:40,755 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-04-08 08:14:40,755 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:40,756 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:40,756 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-04-08 08:14:40,756 INFO L403 AbstractCegarLoop]: === Iteration 17 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:40,756 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:40,756 INFO L85 PathProgramCache]: Analyzing trace with hash -722543360, now seen corresponding path program 1 times [2022-04-08 08:14:40,756 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:40,756 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [148185797] [2022-04-08 08:14:40,757 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:40,757 INFO L85 PathProgramCache]: Analyzing trace with hash -722543360, now seen corresponding path program 2 times [2022-04-08 08:14:40,757 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:40,757 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [593146476] [2022-04-08 08:14:40,757 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:40,757 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:40,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:40,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:40,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:40,822 INFO L290 TraceCheckUtils]: 0: Hoare triple {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-08 08:14:40,822 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 08:14:40,822 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #783#return; {28502#true} is VALID [2022-04-08 08:14:40,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:40,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:40,840 INFO L290 TraceCheckUtils]: 0: Hoare triple {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-08 08:14:40,840 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 08:14:40,840 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #715#return; {28502#true} is VALID [2022-04-08 08:14:40,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:40,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:40,850 INFO L290 TraceCheckUtils]: 0: Hoare triple {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-08 08:14:40,851 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 08:14:40,851 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #717#return; {28502#true} is VALID [2022-04-08 08:14:40,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-08 08:14:40,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:40,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-08 08:14:40,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:40,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-08 08:14:40,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:40,896 INFO L290 TraceCheckUtils]: 0: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-08 08:14:40,897 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-08 08:14:40,897 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-08 08:14:40,897 INFO L290 TraceCheckUtils]: 3: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-08 08:14:40,897 INFO L290 TraceCheckUtils]: 4: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-08 08:14:40,897 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-08 08:14:40,897 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-08 08:14:40,897 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-08 08:14:40,897 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-08 08:14:40,897 INFO L290 TraceCheckUtils]: 9: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 08:14:40,897 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-08 08:14:40,898 INFO L290 TraceCheckUtils]: 0: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-08 08:14:40,898 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-08 08:14:40,898 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-08 08:14:40,900 INFO L272 TraceCheckUtils]: 3: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:40,900 INFO L290 TraceCheckUtils]: 4: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-08 08:14:40,900 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-08 08:14:40,900 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-08 08:14:40,900 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-08 08:14:40,900 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-08 08:14:40,900 INFO L290 TraceCheckUtils]: 9: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-08 08:14:40,900 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-08 08:14:40,900 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-08 08:14:40,901 INFO L290 TraceCheckUtils]: 12: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-08 08:14:40,901 INFO L290 TraceCheckUtils]: 13: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 08:14:40,901 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-08 08:14:40,901 INFO L290 TraceCheckUtils]: 15: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-08 08:14:40,901 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 08:14:40,901 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-08 08:14:40,901 INFO L290 TraceCheckUtils]: 0: Hoare triple {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {28502#true} is VALID [2022-04-08 08:14:40,901 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {28502#true} is VALID [2022-04-08 08:14:40,902 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} is VALID [2022-04-08 08:14:40,902 INFO L290 TraceCheckUtils]: 3: Hoare triple {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} assume !(~status~3 < 0); {28503#false} is VALID [2022-04-08 08:14:40,902 INFO L272 TraceCheckUtils]: 4: Hoare triple {28503#false} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:40,902 INFO L290 TraceCheckUtils]: 5: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-08 08:14:40,902 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-08 08:14:40,902 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-08 08:14:40,903 INFO L272 TraceCheckUtils]: 8: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:40,903 INFO L290 TraceCheckUtils]: 9: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-08 08:14:40,903 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-08 08:14:40,903 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-08 08:14:40,903 INFO L290 TraceCheckUtils]: 12: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-08 08:14:40,903 INFO L290 TraceCheckUtils]: 13: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-08 08:14:40,903 INFO L290 TraceCheckUtils]: 14: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-08 08:14:40,903 INFO L290 TraceCheckUtils]: 15: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-08 08:14:40,903 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-08 08:14:40,904 INFO L290 TraceCheckUtils]: 17: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-08 08:14:40,904 INFO L290 TraceCheckUtils]: 18: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 08:14:40,904 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-08 08:14:40,904 INFO L290 TraceCheckUtils]: 20: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-08 08:14:40,904 INFO L290 TraceCheckUtils]: 21: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 08:14:40,904 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-08 08:14:40,904 INFO L290 TraceCheckUtils]: 23: Hoare triple {28503#false} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {28503#false} is VALID [2022-04-08 08:14:40,904 INFO L290 TraceCheckUtils]: 24: Hoare triple {28503#false} assume true; {28503#false} is VALID [2022-04-08 08:14:40,904 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {28503#false} {28502#true} #727#return; {28503#false} is VALID [2022-04-08 08:14:40,905 INFO L272 TraceCheckUtils]: 0: Hoare triple {28502#true} call ULTIMATE.init(); {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:40,905 INFO L290 TraceCheckUtils]: 1: Hoare triple {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-08 08:14:40,905 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 08:14:40,905 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {28502#true} {28502#true} #783#return; {28502#true} is VALID [2022-04-08 08:14:40,906 INFO L272 TraceCheckUtils]: 4: Hoare triple {28502#true} call #t~ret81 := main(); {28502#true} is VALID [2022-04-08 08:14:40,906 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {28502#true} is VALID [2022-04-08 08:14:40,906 INFO L272 TraceCheckUtils]: 6: Hoare triple {28502#true} call _BLAST_init(); {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:40,906 INFO L290 TraceCheckUtils]: 7: Hoare triple {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-08 08:14:40,907 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 08:14:40,907 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {28502#true} {28502#true} #715#return; {28502#true} is VALID [2022-04-08 08:14:40,907 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-08 08:14:40,907 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} assume !(0 == ~irp_choice~0); {28502#true} is VALID [2022-04-08 08:14:40,907 INFO L272 TraceCheckUtils]: 12: Hoare triple {28502#true} call stub_driver_init(); {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:40,907 INFO L290 TraceCheckUtils]: 13: Hoare triple {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-08 08:14:40,907 INFO L290 TraceCheckUtils]: 14: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 08:14:40,908 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {28502#true} {28502#true} #717#return; {28502#true} is VALID [2022-04-08 08:14:40,908 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {28502#true} is VALID [2022-04-08 08:14:40,908 INFO L290 TraceCheckUtils]: 17: Hoare triple {28502#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {28502#true} is VALID [2022-04-08 08:14:40,908 INFO L290 TraceCheckUtils]: 18: Hoare triple {28502#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {28502#true} is VALID [2022-04-08 08:14:40,908 INFO L290 TraceCheckUtils]: 19: Hoare triple {28502#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {28502#true} is VALID [2022-04-08 08:14:40,908 INFO L290 TraceCheckUtils]: 20: Hoare triple {28502#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {28502#true} is VALID [2022-04-08 08:14:40,908 INFO L290 TraceCheckUtils]: 21: Hoare triple {28502#true} assume 8 == ~tmp_ndt_5~0; {28502#true} is VALID [2022-04-08 08:14:40,908 INFO L272 TraceCheckUtils]: 22: Hoare triple {28502#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:40,909 INFO L290 TraceCheckUtils]: 23: Hoare triple {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {28502#true} is VALID [2022-04-08 08:14:40,909 INFO L290 TraceCheckUtils]: 24: Hoare triple {28502#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {28502#true} is VALID [2022-04-08 08:14:40,909 INFO L290 TraceCheckUtils]: 25: Hoare triple {28502#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} is VALID [2022-04-08 08:14:40,909 INFO L290 TraceCheckUtils]: 26: Hoare triple {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} assume !(~status~3 < 0); {28503#false} is VALID [2022-04-08 08:14:40,909 INFO L272 TraceCheckUtils]: 27: Hoare triple {28503#false} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:40,909 INFO L290 TraceCheckUtils]: 28: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-08 08:14:40,910 INFO L290 TraceCheckUtils]: 29: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-08 08:14:40,910 INFO L290 TraceCheckUtils]: 30: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-08 08:14:40,910 INFO L272 TraceCheckUtils]: 31: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:40,910 INFO L290 TraceCheckUtils]: 32: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-08 08:14:40,910 INFO L290 TraceCheckUtils]: 33: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-08 08:14:40,910 INFO L290 TraceCheckUtils]: 34: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-08 08:14:40,910 INFO L290 TraceCheckUtils]: 35: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-08 08:14:40,911 INFO L290 TraceCheckUtils]: 36: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-08 08:14:40,911 INFO L290 TraceCheckUtils]: 37: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-08 08:14:40,911 INFO L290 TraceCheckUtils]: 38: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-08 08:14:40,911 INFO L290 TraceCheckUtils]: 39: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-08 08:14:40,911 INFO L290 TraceCheckUtils]: 40: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-08 08:14:40,911 INFO L290 TraceCheckUtils]: 41: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 08:14:40,911 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-08 08:14:40,911 INFO L290 TraceCheckUtils]: 43: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-08 08:14:40,911 INFO L290 TraceCheckUtils]: 44: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 08:14:40,911 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-08 08:14:40,911 INFO L290 TraceCheckUtils]: 46: Hoare triple {28503#false} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {28503#false} is VALID [2022-04-08 08:14:40,911 INFO L290 TraceCheckUtils]: 47: Hoare triple {28503#false} assume true; {28503#false} is VALID [2022-04-08 08:14:40,911 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {28503#false} {28502#true} #727#return; {28503#false} is VALID [2022-04-08 08:14:40,912 INFO L290 TraceCheckUtils]: 49: Hoare triple {28503#false} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {28503#false} is VALID [2022-04-08 08:14:40,912 INFO L290 TraceCheckUtils]: 50: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-08 08:14:40,912 INFO L290 TraceCheckUtils]: 51: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-08 08:14:40,912 INFO L290 TraceCheckUtils]: 52: Hoare triple {28503#false} assume ~s~0 != ~UNLOADED~0; {28503#false} is VALID [2022-04-08 08:14:40,912 INFO L290 TraceCheckUtils]: 53: Hoare triple {28503#false} assume -1 != ~status~1; {28503#false} is VALID [2022-04-08 08:14:40,912 INFO L290 TraceCheckUtils]: 54: Hoare triple {28503#false} assume !(~s~0 != ~SKIP2~0); {28503#false} is VALID [2022-04-08 08:14:40,912 INFO L290 TraceCheckUtils]: 55: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-08 08:14:40,912 INFO L290 TraceCheckUtils]: 56: Hoare triple {28503#false} assume !(~s~0 == ~DC~0); {28503#false} is VALID [2022-04-08 08:14:40,912 INFO L290 TraceCheckUtils]: 57: Hoare triple {28503#false} assume ~status~1 != ~lowerDriverReturn~0; {28503#false} is VALID [2022-04-08 08:14:40,912 INFO L272 TraceCheckUtils]: 58: Hoare triple {28503#false} call errorFn(); {28503#false} is VALID [2022-04-08 08:14:40,912 INFO L290 TraceCheckUtils]: 59: Hoare triple {28503#false} assume !false; {28503#false} is VALID [2022-04-08 08:14:40,912 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:40,913 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:40,913 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [593146476] [2022-04-08 08:14:40,913 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [593146476] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:40,913 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:40,913 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 08:14:40,913 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:40,913 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [148185797] [2022-04-08 08:14:40,913 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [148185797] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:40,913 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:40,913 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 08:14:40,913 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1887258134] [2022-04-08 08:14:40,914 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:40,914 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 60 [2022-04-08 08:14:40,914 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:40,914 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-08 08:14:40,946 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:40,946 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-08 08:14:40,946 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:40,947 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-08 08:14:40,947 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-04-08 08:14:40,947 INFO L87 Difference]: Start difference. First operand 211 states and 272 transitions. Second operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-08 08:14:42,068 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:42,069 INFO L93 Difference]: Finished difference Result 250 states and 313 transitions. [2022-04-08 08:14:42,069 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-08 08:14:42,069 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 60 [2022-04-08 08:14:42,069 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:42,069 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-08 08:14:42,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 283 transitions. [2022-04-08 08:14:42,071 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-08 08:14:42,072 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 283 transitions. [2022-04-08 08:14:42,072 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 283 transitions. [2022-04-08 08:14:42,290 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 283 edges. 283 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:42,293 INFO L225 Difference]: With dead ends: 250 [2022-04-08 08:14:42,293 INFO L226 Difference]: Without dead ends: 210 [2022-04-08 08:14:42,293 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-04-08 08:14:42,294 INFO L913 BasicCegarLoop]: 213 mSDtfsCounter, 238 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 238 SdHoareTripleChecker+Valid, 401 SdHoareTripleChecker+Invalid, 314 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:42,294 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [238 Valid, 401 Invalid, 314 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 265 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-04-08 08:14:42,294 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-04-08 08:14:42,610 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 210. [2022-04-08 08:14:42,610 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:42,611 INFO L82 GeneralOperation]: Start isEquivalent. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 08:14:42,611 INFO L74 IsIncluded]: Start isIncluded. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 08:14:42,611 INFO L87 Difference]: Start difference. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 08:14:42,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:42,614 INFO L93 Difference]: Finished difference Result 210 states and 267 transitions. [2022-04-08 08:14:42,614 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-08 08:14:42,614 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:42,614 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:42,615 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 210 states. [2022-04-08 08:14:42,615 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 210 states. [2022-04-08 08:14:42,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:42,618 INFO L93 Difference]: Finished difference Result 210 states and 267 transitions. [2022-04-08 08:14:42,618 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-08 08:14:42,618 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:42,618 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:42,618 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:42,618 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:42,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 08:14:42,621 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 267 transitions. [2022-04-08 08:14:42,621 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 267 transitions. Word has length 60 [2022-04-08 08:14:42,621 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:42,621 INFO L478 AbstractCegarLoop]: Abstraction has 210 states and 267 transitions. [2022-04-08 08:14:42,622 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-08 08:14:42,622 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 267 transitions. [2022-04-08 08:14:42,936 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 267 edges. 267 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:42,937 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-08 08:14:42,937 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-04-08 08:14:42,937 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:42,937 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:42,937 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-04-08 08:14:42,938 INFO L403 AbstractCegarLoop]: === Iteration 18 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:42,938 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:42,938 INFO L85 PathProgramCache]: Analyzing trace with hash -1986597587, now seen corresponding path program 1 times [2022-04-08 08:14:42,938 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:42,938 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [569548372] [2022-04-08 08:14:42,938 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:42,938 INFO L85 PathProgramCache]: Analyzing trace with hash -1986597587, now seen corresponding path program 2 times [2022-04-08 08:14:42,938 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:42,938 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1824160793] [2022-04-08 08:14:42,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:42,939 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:42,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:43,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:43,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:43,019 INFO L290 TraceCheckUtils]: 0: Hoare triple {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-08 08:14:43,019 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-08 08:14:43,019 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #783#return; {29918#true} is VALID [2022-04-08 08:14:43,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:43,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:43,039 INFO L290 TraceCheckUtils]: 0: Hoare triple {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-08 08:14:43,039 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-08 08:14:43,039 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #715#return; {29918#true} is VALID [2022-04-08 08:14:43,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:43,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:43,051 INFO L290 TraceCheckUtils]: 0: Hoare triple {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-08 08:14:43,051 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-08 08:14:43,051 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #717#return; {29918#true} is VALID [2022-04-08 08:14:43,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-08 08:14:43,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:43,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-08 08:14:43,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:43,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-08 08:14:43,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:43,141 INFO L290 TraceCheckUtils]: 0: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-08 08:14:43,141 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-08 08:14:43,141 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-08 08:14:43,141 INFO L290 TraceCheckUtils]: 3: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-08 08:14:43,141 INFO L290 TraceCheckUtils]: 4: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-08 08:14:43,141 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-08 08:14:43,142 INFO L290 TraceCheckUtils]: 6: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-08 08:14:43,142 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 08:14:43,142 INFO L290 TraceCheckUtils]: 8: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,142 INFO L290 TraceCheckUtils]: 9: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,143 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,143 INFO L290 TraceCheckUtils]: 0: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-08 08:14:43,143 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-08 08:14:43,143 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-08 08:14:43,144 INFO L272 TraceCheckUtils]: 3: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:43,144 INFO L290 TraceCheckUtils]: 4: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-08 08:14:43,144 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-08 08:14:43,144 INFO L290 TraceCheckUtils]: 6: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-08 08:14:43,144 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-08 08:14:43,144 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-08 08:14:43,144 INFO L290 TraceCheckUtils]: 9: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-08 08:14:43,144 INFO L290 TraceCheckUtils]: 10: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-08 08:14:43,145 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 08:14:43,145 INFO L290 TraceCheckUtils]: 12: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,145 INFO L290 TraceCheckUtils]: 13: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,146 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,146 INFO L290 TraceCheckUtils]: 15: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,146 INFO L290 TraceCheckUtils]: 16: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,147 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-08 08:14:43,147 INFO L290 TraceCheckUtils]: 0: Hoare triple {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {29918#true} is VALID [2022-04-08 08:14:43,147 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {29918#true} is VALID [2022-04-08 08:14:43,147 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} assume !(0 != ~devExt__UpperConnectData__ClassService~1); {29918#true} is VALID [2022-04-08 08:14:43,147 INFO L290 TraceCheckUtils]: 3: Hoare triple {29918#true} assume !(~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 < ~sizeof__CONNECT_DATA~0);~connectData~0 := ~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0; {29918#true} is VALID [2022-04-08 08:14:43,148 INFO L290 TraceCheckUtils]: 4: Hoare triple {29918#true} assume !(~status~3 < 0); {29918#true} is VALID [2022-04-08 08:14:43,148 INFO L272 TraceCheckUtils]: 5: Hoare triple {29918#true} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:43,149 INFO L290 TraceCheckUtils]: 6: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-08 08:14:43,149 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-08 08:14:43,149 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-08 08:14:43,150 INFO L272 TraceCheckUtils]: 9: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:43,150 INFO L290 TraceCheckUtils]: 10: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-08 08:14:43,150 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-08 08:14:43,150 INFO L290 TraceCheckUtils]: 12: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-08 08:14:43,150 INFO L290 TraceCheckUtils]: 13: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-08 08:14:43,150 INFO L290 TraceCheckUtils]: 14: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-08 08:14:43,150 INFO L290 TraceCheckUtils]: 15: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-08 08:14:43,150 INFO L290 TraceCheckUtils]: 16: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-08 08:14:43,151 INFO L290 TraceCheckUtils]: 17: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 08:14:43,151 INFO L290 TraceCheckUtils]: 18: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,151 INFO L290 TraceCheckUtils]: 19: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,152 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,152 INFO L290 TraceCheckUtils]: 21: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,152 INFO L290 TraceCheckUtils]: 22: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,153 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-08 08:14:43,153 INFO L290 TraceCheckUtils]: 24: Hoare triple {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-08 08:14:43,153 INFO L290 TraceCheckUtils]: 25: Hoare triple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} assume true; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-08 08:14:43,154 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} {29918#true} #727#return; {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,155 INFO L272 TraceCheckUtils]: 0: Hoare triple {29918#true} call ULTIMATE.init(); {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:43,155 INFO L290 TraceCheckUtils]: 1: Hoare triple {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-08 08:14:43,155 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-08 08:14:43,155 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {29918#true} {29918#true} #783#return; {29918#true} is VALID [2022-04-08 08:14:43,155 INFO L272 TraceCheckUtils]: 4: Hoare triple {29918#true} call #t~ret81 := main(); {29918#true} is VALID [2022-04-08 08:14:43,155 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {29918#true} is VALID [2022-04-08 08:14:43,156 INFO L272 TraceCheckUtils]: 6: Hoare triple {29918#true} call _BLAST_init(); {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:43,156 INFO L290 TraceCheckUtils]: 7: Hoare triple {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-08 08:14:43,156 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-08 08:14:43,156 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {29918#true} {29918#true} #715#return; {29918#true} is VALID [2022-04-08 08:14:43,157 INFO L290 TraceCheckUtils]: 10: Hoare triple {29918#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-08 08:14:43,157 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume !(0 == ~irp_choice~0); {29918#true} is VALID [2022-04-08 08:14:43,157 INFO L272 TraceCheckUtils]: 12: Hoare triple {29918#true} call stub_driver_init(); {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:43,157 INFO L290 TraceCheckUtils]: 13: Hoare triple {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-08 08:14:43,157 INFO L290 TraceCheckUtils]: 14: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-08 08:14:43,157 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {29918#true} {29918#true} #717#return; {29918#true} is VALID [2022-04-08 08:14:43,157 INFO L290 TraceCheckUtils]: 16: Hoare triple {29918#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {29918#true} is VALID [2022-04-08 08:14:43,157 INFO L290 TraceCheckUtils]: 17: Hoare triple {29918#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {29918#true} is VALID [2022-04-08 08:14:43,158 INFO L290 TraceCheckUtils]: 18: Hoare triple {29918#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {29918#true} is VALID [2022-04-08 08:14:43,158 INFO L290 TraceCheckUtils]: 19: Hoare triple {29918#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {29918#true} is VALID [2022-04-08 08:14:43,158 INFO L290 TraceCheckUtils]: 20: Hoare triple {29918#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {29918#true} is VALID [2022-04-08 08:14:43,158 INFO L290 TraceCheckUtils]: 21: Hoare triple {29918#true} assume 8 == ~tmp_ndt_5~0; {29918#true} is VALID [2022-04-08 08:14:43,158 INFO L272 TraceCheckUtils]: 22: Hoare triple {29918#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:43,158 INFO L290 TraceCheckUtils]: 23: Hoare triple {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {29918#true} is VALID [2022-04-08 08:14:43,158 INFO L290 TraceCheckUtils]: 24: Hoare triple {29918#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {29918#true} is VALID [2022-04-08 08:14:43,158 INFO L290 TraceCheckUtils]: 25: Hoare triple {29918#true} assume !(0 != ~devExt__UpperConnectData__ClassService~1); {29918#true} is VALID [2022-04-08 08:14:43,159 INFO L290 TraceCheckUtils]: 26: Hoare triple {29918#true} assume !(~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 < ~sizeof__CONNECT_DATA~0);~connectData~0 := ~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0; {29918#true} is VALID [2022-04-08 08:14:43,159 INFO L290 TraceCheckUtils]: 27: Hoare triple {29918#true} assume !(~status~3 < 0); {29918#true} is VALID [2022-04-08 08:14:43,159 INFO L272 TraceCheckUtils]: 28: Hoare triple {29918#true} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:43,159 INFO L290 TraceCheckUtils]: 29: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-08 08:14:43,159 INFO L290 TraceCheckUtils]: 30: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-08 08:14:43,159 INFO L290 TraceCheckUtils]: 31: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-08 08:14:43,160 INFO L272 TraceCheckUtils]: 32: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:43,160 INFO L290 TraceCheckUtils]: 33: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-08 08:14:43,160 INFO L290 TraceCheckUtils]: 34: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-08 08:14:43,160 INFO L290 TraceCheckUtils]: 35: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-08 08:14:43,160 INFO L290 TraceCheckUtils]: 36: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-08 08:14:43,160 INFO L290 TraceCheckUtils]: 37: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-08 08:14:43,160 INFO L290 TraceCheckUtils]: 38: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-08 08:14:43,160 INFO L290 TraceCheckUtils]: 39: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-08 08:14:43,161 INFO L290 TraceCheckUtils]: 40: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 08:14:43,161 INFO L290 TraceCheckUtils]: 41: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,161 INFO L290 TraceCheckUtils]: 42: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,162 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,162 INFO L290 TraceCheckUtils]: 44: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,162 INFO L290 TraceCheckUtils]: 45: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,163 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-08 08:14:43,163 INFO L290 TraceCheckUtils]: 47: Hoare triple {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-08 08:14:43,164 INFO L290 TraceCheckUtils]: 48: Hoare triple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} assume true; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-08 08:14:43,164 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} {29918#true} #727#return; {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,164 INFO L290 TraceCheckUtils]: 50: Hoare triple {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,165 INFO L290 TraceCheckUtils]: 51: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,165 INFO L290 TraceCheckUtils]: 52: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,165 INFO L290 TraceCheckUtils]: 53: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,165 INFO L290 TraceCheckUtils]: 54: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,165 INFO L290 TraceCheckUtils]: 55: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,166 INFO L290 TraceCheckUtils]: 56: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,166 INFO L290 TraceCheckUtils]: 57: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:43,166 INFO L290 TraceCheckUtils]: 58: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {29919#false} is VALID [2022-04-08 08:14:43,166 INFO L272 TraceCheckUtils]: 59: Hoare triple {29919#false} call errorFn(); {29919#false} is VALID [2022-04-08 08:14:43,166 INFO L290 TraceCheckUtils]: 60: Hoare triple {29919#false} assume !false; {29919#false} is VALID [2022-04-08 08:14:43,167 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:43,167 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:43,167 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1824160793] [2022-04-08 08:14:43,167 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1824160793] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:43,167 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:43,167 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-08 08:14:43,167 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:43,167 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [569548372] [2022-04-08 08:14:43,167 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [569548372] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:43,167 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:43,167 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-08 08:14:43,167 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1950379270] [2022-04-08 08:14:43,167 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:43,168 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-04-08 08:14:43,168 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:43,168 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:43,200 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:43,201 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-08 08:14:43,201 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:43,202 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-08 08:14:43,202 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-04-08 08:14:43,202 INFO L87 Difference]: Start difference. First operand 210 states and 267 transitions. Second operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:46,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:46,121 INFO L93 Difference]: Finished difference Result 222 states and 279 transitions. [2022-04-08 08:14:46,121 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-08 08:14:46,121 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-04-08 08:14:46,121 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:46,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:46,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 249 transitions. [2022-04-08 08:14:46,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:46,124 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 249 transitions. [2022-04-08 08:14:46,124 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 249 transitions. [2022-04-08 08:14:46,360 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 249 edges. 249 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:46,363 INFO L225 Difference]: With dead ends: 222 [2022-04-08 08:14:46,364 INFO L226 Difference]: Without dead ends: 184 [2022-04-08 08:14:46,364 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-04-08 08:14:46,364 INFO L913 BasicCegarLoop]: 212 mSDtfsCounter, 456 mSDsluCounter, 767 mSDsCounter, 0 mSdLazyCounter, 1349 mSolverCounterSat, 90 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 456 SdHoareTripleChecker+Valid, 979 SdHoareTripleChecker+Invalid, 1439 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 90 IncrementalHoareTripleChecker+Valid, 1349 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:46,364 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [456 Valid, 979 Invalid, 1439 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [90 Valid, 1349 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-08 08:14:46,365 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2022-04-08 08:14:46,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 184. [2022-04-08 08:14:46,688 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:46,689 INFO L82 GeneralOperation]: Start isEquivalent. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-08 08:14:46,689 INFO L74 IsIncluded]: Start isIncluded. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-08 08:14:46,689 INFO L87 Difference]: Start difference. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-08 08:14:46,691 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:46,691 INFO L93 Difference]: Finished difference Result 184 states and 229 transitions. [2022-04-08 08:14:46,691 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-08 08:14:46,691 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:46,691 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:46,691 INFO L74 IsIncluded]: Start isIncluded. First operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) Second operand 184 states. [2022-04-08 08:14:46,692 INFO L87 Difference]: Start difference. First operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) Second operand 184 states. [2022-04-08 08:14:46,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:46,694 INFO L93 Difference]: Finished difference Result 184 states and 229 transitions. [2022-04-08 08:14:46,694 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-08 08:14:46,694 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:46,694 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:46,694 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:46,695 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:46,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-08 08:14:46,697 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 229 transitions. [2022-04-08 08:14:46,697 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 229 transitions. Word has length 61 [2022-04-08 08:14:46,697 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:46,697 INFO L478 AbstractCegarLoop]: Abstraction has 184 states and 229 transitions. [2022-04-08 08:14:46,697 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:46,697 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 184 states and 229 transitions. [2022-04-08 08:14:46,986 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 229 edges. 229 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:46,986 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-08 08:14:46,986 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-04-08 08:14:46,986 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:46,986 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:46,987 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-04-08 08:14:46,987 INFO L403 AbstractCegarLoop]: === Iteration 19 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:46,987 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:46,987 INFO L85 PathProgramCache]: Analyzing trace with hash -2132592656, now seen corresponding path program 1 times [2022-04-08 08:14:46,987 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:46,987 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1980737654] [2022-04-08 08:14:46,987 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:46,987 INFO L85 PathProgramCache]: Analyzing trace with hash -2132592656, now seen corresponding path program 2 times [2022-04-08 08:14:46,987 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:46,988 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [45448464] [2022-04-08 08:14:46,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:46,988 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:47,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:47,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:47,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:47,050 INFO L290 TraceCheckUtils]: 0: Hoare triple {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-08 08:14:47,050 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-08 08:14:47,050 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #783#return; {31182#true} is VALID [2022-04-08 08:14:47,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:47,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:47,071 INFO L290 TraceCheckUtils]: 0: Hoare triple {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-08 08:14:47,071 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-08 08:14:47,071 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #715#return; {31182#true} is VALID [2022-04-08 08:14:47,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:47,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:47,083 INFO L290 TraceCheckUtils]: 0: Hoare triple {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-08 08:14:47,083 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-08 08:14:47,083 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #717#return; {31182#true} is VALID [2022-04-08 08:14:47,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-04-08 08:14:47,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:47,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-08 08:14:47,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:47,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-08 08:14:47,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:47,160 INFO L290 TraceCheckUtils]: 0: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-08 08:14:47,160 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-08 08:14:47,160 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-08 08:14:47,160 INFO L290 TraceCheckUtils]: 3: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-08 08:14:47,160 INFO L290 TraceCheckUtils]: 4: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-08 08:14:47,160 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-08 08:14:47,160 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-08 08:14:47,161 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 08:14:47,161 INFO L290 TraceCheckUtils]: 8: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,161 INFO L290 TraceCheckUtils]: 9: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,162 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,162 INFO L290 TraceCheckUtils]: 0: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-08 08:14:47,162 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-08 08:14:47,162 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-08 08:14:47,163 INFO L272 TraceCheckUtils]: 3: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:47,163 INFO L290 TraceCheckUtils]: 4: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-08 08:14:47,163 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-08 08:14:47,163 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-08 08:14:47,163 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-08 08:14:47,163 INFO L290 TraceCheckUtils]: 8: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-08 08:14:47,163 INFO L290 TraceCheckUtils]: 9: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-08 08:14:47,163 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-08 08:14:47,163 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 08:14:47,164 INFO L290 TraceCheckUtils]: 12: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,164 INFO L290 TraceCheckUtils]: 13: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,164 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,165 INFO L290 TraceCheckUtils]: 15: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,165 INFO L290 TraceCheckUtils]: 16: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,166 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-08 08:14:47,166 INFO L290 TraceCheckUtils]: 0: Hoare triple {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {31182#true} is VALID [2022-04-08 08:14:47,166 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume 0 == ~irpStack__MajorFunction~0; {31182#true} is VALID [2022-04-08 08:14:47,166 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {31182#true} is VALID [2022-04-08 08:14:47,166 INFO L290 TraceCheckUtils]: 3: Hoare triple {31182#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {31182#true} is VALID [2022-04-08 08:14:47,166 INFO L272 TraceCheckUtils]: 4: Hoare triple {31182#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:47,166 INFO L290 TraceCheckUtils]: 5: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-08 08:14:47,167 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-08 08:14:47,167 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-08 08:14:47,167 INFO L272 TraceCheckUtils]: 8: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:47,167 INFO L290 TraceCheckUtils]: 9: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-08 08:14:47,167 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-08 08:14:47,167 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-08 08:14:47,167 INFO L290 TraceCheckUtils]: 12: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-08 08:14:47,167 INFO L290 TraceCheckUtils]: 13: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-08 08:14:47,168 INFO L290 TraceCheckUtils]: 14: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-08 08:14:47,168 INFO L290 TraceCheckUtils]: 15: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-08 08:14:47,168 INFO L290 TraceCheckUtils]: 16: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 08:14:47,168 INFO L290 TraceCheckUtils]: 17: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,168 INFO L290 TraceCheckUtils]: 18: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,169 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,169 INFO L290 TraceCheckUtils]: 20: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,170 INFO L290 TraceCheckUtils]: 21: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,170 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-08 08:14:47,170 INFO L290 TraceCheckUtils]: 23: Hoare triple {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~tmp~0 := #t~ret43;havoc #t~ret43;#res := ~tmp~0; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-08 08:14:47,171 INFO L290 TraceCheckUtils]: 24: Hoare triple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} assume true; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-08 08:14:47,171 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} {31182#true} #719#return; {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,172 INFO L272 TraceCheckUtils]: 0: Hoare triple {31182#true} call ULTIMATE.init(); {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:47,172 INFO L290 TraceCheckUtils]: 1: Hoare triple {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-08 08:14:47,172 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-08 08:14:47,173 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {31182#true} {31182#true} #783#return; {31182#true} is VALID [2022-04-08 08:14:47,173 INFO L272 TraceCheckUtils]: 4: Hoare triple {31182#true} call #t~ret81 := main(); {31182#true} is VALID [2022-04-08 08:14:47,173 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {31182#true} is VALID [2022-04-08 08:14:47,173 INFO L272 TraceCheckUtils]: 6: Hoare triple {31182#true} call _BLAST_init(); {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:47,173 INFO L290 TraceCheckUtils]: 7: Hoare triple {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-08 08:14:47,174 INFO L290 TraceCheckUtils]: 8: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-08 08:14:47,174 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {31182#true} {31182#true} #715#return; {31182#true} is VALID [2022-04-08 08:14:47,174 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-08 08:14:47,174 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} assume !(0 == ~irp_choice~0); {31182#true} is VALID [2022-04-08 08:14:47,174 INFO L272 TraceCheckUtils]: 12: Hoare triple {31182#true} call stub_driver_init(); {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:47,174 INFO L290 TraceCheckUtils]: 13: Hoare triple {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-08 08:14:47,174 INFO L290 TraceCheckUtils]: 14: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-08 08:14:47,174 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {31182#true} {31182#true} #717#return; {31182#true} is VALID [2022-04-08 08:14:47,175 INFO L290 TraceCheckUtils]: 16: Hoare triple {31182#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {31182#true} is VALID [2022-04-08 08:14:47,175 INFO L290 TraceCheckUtils]: 17: Hoare triple {31182#true} assume 0 == ~tmp_ndt_1~0; {31182#true} is VALID [2022-04-08 08:14:47,175 INFO L272 TraceCheckUtils]: 18: Hoare triple {31182#true} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:47,175 INFO L290 TraceCheckUtils]: 19: Hoare triple {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {31182#true} is VALID [2022-04-08 08:14:47,175 INFO L290 TraceCheckUtils]: 20: Hoare triple {31182#true} assume 0 == ~irpStack__MajorFunction~0; {31182#true} is VALID [2022-04-08 08:14:47,175 INFO L290 TraceCheckUtils]: 21: Hoare triple {31182#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {31182#true} is VALID [2022-04-08 08:14:47,175 INFO L290 TraceCheckUtils]: 22: Hoare triple {31182#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {31182#true} is VALID [2022-04-08 08:14:47,176 INFO L272 TraceCheckUtils]: 23: Hoare triple {31182#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:47,176 INFO L290 TraceCheckUtils]: 24: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-08 08:14:47,176 INFO L290 TraceCheckUtils]: 25: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-08 08:14:47,176 INFO L290 TraceCheckUtils]: 26: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-08 08:14:47,177 INFO L272 TraceCheckUtils]: 27: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:47,177 INFO L290 TraceCheckUtils]: 28: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-08 08:14:47,177 INFO L290 TraceCheckUtils]: 29: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-08 08:14:47,177 INFO L290 TraceCheckUtils]: 30: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-08 08:14:47,177 INFO L290 TraceCheckUtils]: 31: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-08 08:14:47,177 INFO L290 TraceCheckUtils]: 32: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-08 08:14:47,177 INFO L290 TraceCheckUtils]: 33: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-08 08:14:47,177 INFO L290 TraceCheckUtils]: 34: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-08 08:14:47,177 INFO L290 TraceCheckUtils]: 35: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 08:14:47,178 INFO L290 TraceCheckUtils]: 36: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,178 INFO L290 TraceCheckUtils]: 37: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,178 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,179 INFO L290 TraceCheckUtils]: 39: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,179 INFO L290 TraceCheckUtils]: 40: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,180 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-08 08:14:47,180 INFO L290 TraceCheckUtils]: 42: Hoare triple {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~tmp~0 := #t~ret43;havoc #t~ret43;#res := ~tmp~0; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-08 08:14:47,180 INFO L290 TraceCheckUtils]: 43: Hoare triple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} assume true; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-08 08:14:47,181 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} {31182#true} #719#return; {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,183 INFO L290 TraceCheckUtils]: 45: Hoare triple {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret29 && #t~ret29 <= 2147483647;~status~1 := #t~ret29;havoc #t~ret29; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,184 INFO L290 TraceCheckUtils]: 46: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,184 INFO L290 TraceCheckUtils]: 47: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,184 INFO L290 TraceCheckUtils]: 48: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,184 INFO L290 TraceCheckUtils]: 49: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,184 INFO L290 TraceCheckUtils]: 50: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,185 INFO L290 TraceCheckUtils]: 51: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,185 INFO L290 TraceCheckUtils]: 52: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:47,185 INFO L290 TraceCheckUtils]: 53: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {31183#false} is VALID [2022-04-08 08:14:47,185 INFO L272 TraceCheckUtils]: 54: Hoare triple {31183#false} call errorFn(); {31183#false} is VALID [2022-04-08 08:14:47,185 INFO L290 TraceCheckUtils]: 55: Hoare triple {31183#false} assume !false; {31183#false} is VALID [2022-04-08 08:14:47,186 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:47,186 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:47,186 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [45448464] [2022-04-08 08:14:47,187 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [45448464] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:47,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:47,188 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-08 08:14:47,188 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:47,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1980737654] [2022-04-08 08:14:47,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1980737654] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:47,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:47,188 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-08 08:14:47,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1579116212] [2022-04-08 08:14:47,188 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:47,188 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 56 [2022-04-08 08:14:47,189 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:47,189 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:47,219 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:47,219 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-08 08:14:47,219 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:47,219 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-08 08:14:47,219 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-04-08 08:14:47,220 INFO L87 Difference]: Start difference. First operand 184 states and 229 transitions. Second operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:49,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:49,701 INFO L93 Difference]: Finished difference Result 196 states and 241 transitions. [2022-04-08 08:14:49,701 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-08 08:14:49,701 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 56 [2022-04-08 08:14:49,701 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:49,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:49,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 211 transitions. [2022-04-08 08:14:49,702 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:49,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 211 transitions. [2022-04-08 08:14:49,703 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 211 transitions. [2022-04-08 08:14:49,868 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 211 edges. 211 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:49,870 INFO L225 Difference]: With dead ends: 196 [2022-04-08 08:14:49,870 INFO L226 Difference]: Without dead ends: 182 [2022-04-08 08:14:49,870 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-04-08 08:14:49,871 INFO L913 BasicCegarLoop]: 165 mSDtfsCounter, 343 mSDsluCounter, 626 mSDsCounter, 0 mSdLazyCounter, 1181 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 343 SdHoareTripleChecker+Valid, 791 SdHoareTripleChecker+Invalid, 1262 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 1181 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:49,871 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [343 Valid, 791 Invalid, 1262 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 1181 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-04-08 08:14:49,871 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2022-04-08 08:14:50,143 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 182. [2022-04-08 08:14:50,144 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:50,144 INFO L82 GeneralOperation]: Start isEquivalent. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-08 08:14:50,144 INFO L74 IsIncluded]: Start isIncluded. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-08 08:14:50,144 INFO L87 Difference]: Start difference. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-08 08:14:50,146 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:50,146 INFO L93 Difference]: Finished difference Result 182 states and 225 transitions. [2022-04-08 08:14:50,146 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-08 08:14:50,147 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:50,147 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:50,147 INFO L74 IsIncluded]: Start isIncluded. First operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) Second operand 182 states. [2022-04-08 08:14:50,147 INFO L87 Difference]: Start difference. First operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) Second operand 182 states. [2022-04-08 08:14:50,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:50,149 INFO L93 Difference]: Finished difference Result 182 states and 225 transitions. [2022-04-08 08:14:50,149 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-08 08:14:50,149 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:50,149 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:50,149 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:50,149 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:50,150 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-08 08:14:50,152 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 225 transitions. [2022-04-08 08:14:50,152 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 225 transitions. Word has length 56 [2022-04-08 08:14:50,152 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:50,152 INFO L478 AbstractCegarLoop]: Abstraction has 182 states and 225 transitions. [2022-04-08 08:14:50,152 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:50,152 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 182 states and 225 transitions. [2022-04-08 08:14:50,418 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 225 edges. 225 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:50,418 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-08 08:14:50,418 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-04-08 08:14:50,418 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:50,419 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:50,419 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-04-08 08:14:50,419 INFO L403 AbstractCegarLoop]: === Iteration 20 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:50,419 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:50,419 INFO L85 PathProgramCache]: Analyzing trace with hash 1221590652, now seen corresponding path program 1 times [2022-04-08 08:14:50,419 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:50,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [171223370] [2022-04-08 08:14:50,419 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:50,419 INFO L85 PathProgramCache]: Analyzing trace with hash 1221590652, now seen corresponding path program 2 times [2022-04-08 08:14:50,420 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:50,420 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [620417785] [2022-04-08 08:14:50,420 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:50,420 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:50,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:50,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:50,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:50,483 INFO L290 TraceCheckUtils]: 0: Hoare triple {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-08 08:14:50,483 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-08 08:14:50,483 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #783#return; {32385#true} is VALID [2022-04-08 08:14:50,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:50,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:50,511 INFO L290 TraceCheckUtils]: 0: Hoare triple {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-08 08:14:50,511 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-08 08:14:50,512 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #715#return; {32385#true} is VALID [2022-04-08 08:14:50,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:50,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:50,540 INFO L290 TraceCheckUtils]: 0: Hoare triple {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-08 08:14:50,540 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-08 08:14:50,540 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #717#return; {32385#true} is VALID [2022-04-08 08:14:50,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-08 08:14:50,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:50,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-04-08 08:14:50,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:50,644 INFO L290 TraceCheckUtils]: 0: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-08 08:14:50,644 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-08 08:14:50,645 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-08 08:14:50,645 INFO L290 TraceCheckUtils]: 3: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-08 08:14:50,645 INFO L290 TraceCheckUtils]: 4: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:50,646 INFO L290 TraceCheckUtils]: 5: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:50,646 INFO L290 TraceCheckUtils]: 6: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:50,646 INFO L290 TraceCheckUtils]: 7: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 08:14:50,647 INFO L290 TraceCheckUtils]: 8: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 08:14:50,647 INFO L290 TraceCheckUtils]: 9: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 08:14:50,647 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 08:14:50,648 INFO L290 TraceCheckUtils]: 0: Hoare triple {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {32385#true} is VALID [2022-04-08 08:14:50,648 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume !(0 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-08 08:14:50,648 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} assume !(23 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-08 08:14:50,648 INFO L290 TraceCheckUtils]: 3: Hoare triple {32385#true} assume 2 == ~irpStack__MinorFunction~0; {32385#true} is VALID [2022-04-08 08:14:50,648 INFO L290 TraceCheckUtils]: 4: Hoare triple {32385#true} ~devExt__Removed~0 := 1; {32385#true} is VALID [2022-04-08 08:14:50,648 INFO L290 TraceCheckUtils]: 5: Hoare triple {32385#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {32385#true} is VALID [2022-04-08 08:14:50,648 INFO L290 TraceCheckUtils]: 6: Hoare triple {32385#true} #t~post15 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post15;havoc #t~post15;#t~post16 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post16;havoc #t~post16; {32385#true} is VALID [2022-04-08 08:14:50,656 INFO L272 TraceCheckUtils]: 7: Hoare triple {32385#true} call #t~ret17 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:50,656 INFO L290 TraceCheckUtils]: 8: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-08 08:14:50,656 INFO L290 TraceCheckUtils]: 9: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-08 08:14:50,656 INFO L290 TraceCheckUtils]: 10: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-08 08:14:50,656 INFO L290 TraceCheckUtils]: 11: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-08 08:14:50,657 INFO L290 TraceCheckUtils]: 12: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:50,657 INFO L290 TraceCheckUtils]: 13: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:50,657 INFO L290 TraceCheckUtils]: 14: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:50,658 INFO L290 TraceCheckUtils]: 15: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 08:14:50,658 INFO L290 TraceCheckUtils]: 16: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 08:14:50,658 INFO L290 TraceCheckUtils]: 17: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 08:14:50,659 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 08:14:50,659 INFO L290 TraceCheckUtils]: 19: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume -2147483648 <= #t~ret17 && #t~ret17 <= 2147483647;havoc #t~ret17;~status~0 := 0; {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,659 INFO L290 TraceCheckUtils]: 20: Hoare triple {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,660 INFO L290 TraceCheckUtils]: 21: Hoare triple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,660 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {32385#true} #723#return; {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,662 INFO L272 TraceCheckUtils]: 0: Hoare triple {32385#true} call ULTIMATE.init(); {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:50,662 INFO L290 TraceCheckUtils]: 1: Hoare triple {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-08 08:14:50,662 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-08 08:14:50,662 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {32385#true} {32385#true} #783#return; {32385#true} is VALID [2022-04-08 08:14:50,662 INFO L272 TraceCheckUtils]: 4: Hoare triple {32385#true} call #t~ret81 := main(); {32385#true} is VALID [2022-04-08 08:14:50,662 INFO L290 TraceCheckUtils]: 5: Hoare triple {32385#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {32385#true} is VALID [2022-04-08 08:14:50,663 INFO L272 TraceCheckUtils]: 6: Hoare triple {32385#true} call _BLAST_init(); {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:50,663 INFO L290 TraceCheckUtils]: 7: Hoare triple {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-08 08:14:50,663 INFO L290 TraceCheckUtils]: 8: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-08 08:14:50,663 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {32385#true} {32385#true} #715#return; {32385#true} is VALID [2022-04-08 08:14:50,663 INFO L290 TraceCheckUtils]: 10: Hoare triple {32385#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-08 08:14:50,663 INFO L290 TraceCheckUtils]: 11: Hoare triple {32385#true} assume !(0 == ~irp_choice~0); {32385#true} is VALID [2022-04-08 08:14:50,664 INFO L272 TraceCheckUtils]: 12: Hoare triple {32385#true} call stub_driver_init(); {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:50,664 INFO L290 TraceCheckUtils]: 13: Hoare triple {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-08 08:14:50,664 INFO L290 TraceCheckUtils]: 14: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-08 08:14:50,664 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {32385#true} {32385#true} #717#return; {32385#true} is VALID [2022-04-08 08:14:50,664 INFO L290 TraceCheckUtils]: 16: Hoare triple {32385#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {32385#true} is VALID [2022-04-08 08:14:50,664 INFO L290 TraceCheckUtils]: 17: Hoare triple {32385#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {32385#true} is VALID [2022-04-08 08:14:50,664 INFO L290 TraceCheckUtils]: 18: Hoare triple {32385#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {32385#true} is VALID [2022-04-08 08:14:50,664 INFO L290 TraceCheckUtils]: 19: Hoare triple {32385#true} assume 3 == ~tmp_ndt_3~0; {32385#true} is VALID [2022-04-08 08:14:50,665 INFO L272 TraceCheckUtils]: 20: Hoare triple {32385#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:50,665 INFO L290 TraceCheckUtils]: 21: Hoare triple {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {32385#true} is VALID [2022-04-08 08:14:50,665 INFO L290 TraceCheckUtils]: 22: Hoare triple {32385#true} assume !(0 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-08 08:14:50,665 INFO L290 TraceCheckUtils]: 23: Hoare triple {32385#true} assume !(23 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-08 08:14:50,665 INFO L290 TraceCheckUtils]: 24: Hoare triple {32385#true} assume 2 == ~irpStack__MinorFunction~0; {32385#true} is VALID [2022-04-08 08:14:50,665 INFO L290 TraceCheckUtils]: 25: Hoare triple {32385#true} ~devExt__Removed~0 := 1; {32385#true} is VALID [2022-04-08 08:14:50,665 INFO L290 TraceCheckUtils]: 26: Hoare triple {32385#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {32385#true} is VALID [2022-04-08 08:14:50,666 INFO L290 TraceCheckUtils]: 27: Hoare triple {32385#true} #t~post15 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post15;havoc #t~post15;#t~post16 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post16;havoc #t~post16; {32385#true} is VALID [2022-04-08 08:14:50,666 INFO L272 TraceCheckUtils]: 28: Hoare triple {32385#true} call #t~ret17 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:50,666 INFO L290 TraceCheckUtils]: 29: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-08 08:14:50,666 INFO L290 TraceCheckUtils]: 30: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-08 08:14:50,666 INFO L290 TraceCheckUtils]: 31: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-08 08:14:50,666 INFO L290 TraceCheckUtils]: 32: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-08 08:14:50,667 INFO L290 TraceCheckUtils]: 33: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:50,667 INFO L290 TraceCheckUtils]: 34: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:50,667 INFO L290 TraceCheckUtils]: 35: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 08:14:50,668 INFO L290 TraceCheckUtils]: 36: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 08:14:50,668 INFO L290 TraceCheckUtils]: 37: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 08:14:50,668 INFO L290 TraceCheckUtils]: 38: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 08:14:50,669 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 08:14:50,669 INFO L290 TraceCheckUtils]: 40: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume -2147483648 <= #t~ret17 && #t~ret17 <= 2147483647;havoc #t~ret17;~status~0 := 0; {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,670 INFO L290 TraceCheckUtils]: 41: Hoare triple {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,670 INFO L290 TraceCheckUtils]: 42: Hoare triple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,671 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {32385#true} #723#return; {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,671 INFO L290 TraceCheckUtils]: 44: Hoare triple {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,671 INFO L290 TraceCheckUtils]: 45: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,671 INFO L290 TraceCheckUtils]: 46: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,672 INFO L290 TraceCheckUtils]: 47: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,672 INFO L290 TraceCheckUtils]: 48: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,672 INFO L290 TraceCheckUtils]: 49: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,672 INFO L290 TraceCheckUtils]: 50: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,673 INFO L290 TraceCheckUtils]: 51: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:50,673 INFO L290 TraceCheckUtils]: 52: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {32386#false} is VALID [2022-04-08 08:14:50,673 INFO L272 TraceCheckUtils]: 53: Hoare triple {32386#false} call errorFn(); {32386#false} is VALID [2022-04-08 08:14:50,673 INFO L290 TraceCheckUtils]: 54: Hoare triple {32386#false} assume !false; {32386#false} is VALID [2022-04-08 08:14:50,674 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:50,674 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:50,674 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [620417785] [2022-04-08 08:14:50,674 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [620417785] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:50,674 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:50,674 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-08 08:14:50,674 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:50,674 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [171223370] [2022-04-08 08:14:50,674 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [171223370] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:50,674 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:50,674 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-08 08:14:50,674 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [811621323] [2022-04-08 08:14:50,674 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:50,675 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-08 08:14:50,675 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:50,675 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:50,715 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:50,715 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-04-08 08:14:50,715 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:50,715 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-04-08 08:14:50,715 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2022-04-08 08:14:50,716 INFO L87 Difference]: Start difference. First operand 182 states and 225 transitions. Second operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:53,173 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:53,173 INFO L93 Difference]: Finished difference Result 235 states and 281 transitions. [2022-04-08 08:14:53,173 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-08 08:14:53,173 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-08 08:14:53,173 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:53,173 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:53,175 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 256 transitions. [2022-04-08 08:14:53,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:53,177 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 256 transitions. [2022-04-08 08:14:53,177 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 256 transitions. [2022-04-08 08:14:53,397 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 256 edges. 256 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:53,402 INFO L225 Difference]: With dead ends: 235 [2022-04-08 08:14:53,402 INFO L226 Difference]: Without dead ends: 218 [2022-04-08 08:14:53,403 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=101, Invalid=405, Unknown=0, NotChecked=0, Total=506 [2022-04-08 08:14:53,403 INFO L913 BasicCegarLoop]: 169 mSDtfsCounter, 565 mSDsluCounter, 430 mSDsCounter, 0 mSdLazyCounter, 892 mSolverCounterSat, 125 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 565 SdHoareTripleChecker+Valid, 599 SdHoareTripleChecker+Invalid, 1017 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 125 IncrementalHoareTripleChecker+Valid, 892 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:53,403 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [565 Valid, 599 Invalid, 1017 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [125 Valid, 892 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-08 08:14:53,403 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 218 states. [2022-04-08 08:14:53,690 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 218 to 188. [2022-04-08 08:14:53,690 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:53,690 INFO L82 GeneralOperation]: Start isEquivalent. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-08 08:14:53,691 INFO L74 IsIncluded]: Start isIncluded. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-08 08:14:53,691 INFO L87 Difference]: Start difference. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-08 08:14:53,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:53,694 INFO L93 Difference]: Finished difference Result 218 states and 263 transitions. [2022-04-08 08:14:53,694 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 263 transitions. [2022-04-08 08:14:53,694 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:53,694 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:53,694 INFO L74 IsIncluded]: Start isIncluded. First operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) Second operand 218 states. [2022-04-08 08:14:53,695 INFO L87 Difference]: Start difference. First operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) Second operand 218 states. [2022-04-08 08:14:53,709 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:53,709 INFO L93 Difference]: Finished difference Result 218 states and 263 transitions. [2022-04-08 08:14:53,709 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 263 transitions. [2022-04-08 08:14:53,710 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:53,710 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:53,710 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:53,710 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:53,710 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-08 08:14:53,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 232 transitions. [2022-04-08 08:14:53,712 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 232 transitions. Word has length 55 [2022-04-08 08:14:53,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:53,713 INFO L478 AbstractCegarLoop]: Abstraction has 188 states and 232 transitions. [2022-04-08 08:14:53,713 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:53,713 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 188 states and 232 transitions. [2022-04-08 08:14:54,004 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 232 edges. 232 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:54,005 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 232 transitions. [2022-04-08 08:14:54,005 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-04-08 08:14:54,005 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:54,005 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:54,005 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-04-08 08:14:54,006 INFO L403 AbstractCegarLoop]: === Iteration 21 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:54,006 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:54,006 INFO L85 PathProgramCache]: Analyzing trace with hash 2050869943, now seen corresponding path program 1 times [2022-04-08 08:14:54,006 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:54,006 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1126101327] [2022-04-08 08:14:54,006 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:54,006 INFO L85 PathProgramCache]: Analyzing trace with hash 2050869943, now seen corresponding path program 2 times [2022-04-08 08:14:54,006 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:54,006 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1455204695] [2022-04-08 08:14:54,006 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:54,007 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:54,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:54,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:54,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:54,078 INFO L290 TraceCheckUtils]: 0: Hoare triple {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-08 08:14:54,079 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-08 08:14:54,079 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #783#return; {33749#true} is VALID [2022-04-08 08:14:54,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:54,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:54,104 INFO L290 TraceCheckUtils]: 0: Hoare triple {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-08 08:14:54,105 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-08 08:14:54,105 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #715#return; {33749#true} is VALID [2022-04-08 08:14:54,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:54,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:54,120 INFO L290 TraceCheckUtils]: 0: Hoare triple {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-08 08:14:54,120 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-08 08:14:54,120 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #717#return; {33749#true} is VALID [2022-04-08 08:14:54,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-08 08:14:54,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:54,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-04-08 08:14:54,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:54,194 INFO L290 TraceCheckUtils]: 0: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-08 08:14:54,195 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-08 08:14:54,195 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-08 08:14:54,195 INFO L290 TraceCheckUtils]: 3: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-08 08:14:54,195 INFO L290 TraceCheckUtils]: 4: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-08 08:14:54,195 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-08 08:14:54,195 INFO L290 TraceCheckUtils]: 6: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-08 08:14:54,195 INFO L290 TraceCheckUtils]: 7: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 08:14:54,196 INFO L290 TraceCheckUtils]: 8: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,196 INFO L290 TraceCheckUtils]: 9: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,197 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,197 INFO L290 TraceCheckUtils]: 0: Hoare triple {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {33749#true} is VALID [2022-04-08 08:14:54,197 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume !(0 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-08 08:14:54,197 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} assume !(23 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-08 08:14:54,197 INFO L290 TraceCheckUtils]: 3: Hoare triple {33749#true} assume !(2 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-08 08:14:54,197 INFO L290 TraceCheckUtils]: 4: Hoare triple {33749#true} assume 1 == ~irpStack__MinorFunction~0; {33749#true} is VALID [2022-04-08 08:14:54,197 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {33749#true} is VALID [2022-04-08 08:14:54,197 INFO L290 TraceCheckUtils]: 6: Hoare triple {33749#true} #t~post18 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post18;havoc #t~post18;#t~post19 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post19;havoc #t~post19; {33749#true} is VALID [2022-04-08 08:14:54,198 INFO L272 TraceCheckUtils]: 7: Hoare triple {33749#true} call #t~ret20 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:54,198 INFO L290 TraceCheckUtils]: 8: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-08 08:14:54,198 INFO L290 TraceCheckUtils]: 9: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-08 08:14:54,198 INFO L290 TraceCheckUtils]: 10: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-08 08:14:54,198 INFO L290 TraceCheckUtils]: 11: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-08 08:14:54,198 INFO L290 TraceCheckUtils]: 12: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-08 08:14:54,198 INFO L290 TraceCheckUtils]: 13: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-08 08:14:54,198 INFO L290 TraceCheckUtils]: 14: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-08 08:14:54,199 INFO L290 TraceCheckUtils]: 15: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 08:14:54,199 INFO L290 TraceCheckUtils]: 16: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,199 INFO L290 TraceCheckUtils]: 17: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,200 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,200 INFO L290 TraceCheckUtils]: 19: Hoare triple {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret20 && #t~ret20 <= 2147483647;~status~0 := #t~ret20;havoc #t~ret20; {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,201 INFO L290 TraceCheckUtils]: 20: Hoare triple {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,201 INFO L290 TraceCheckUtils]: 21: Hoare triple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,202 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {33749#true} #723#return; {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,203 INFO L272 TraceCheckUtils]: 0: Hoare triple {33749#true} call ULTIMATE.init(); {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:54,203 INFO L290 TraceCheckUtils]: 1: Hoare triple {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-08 08:14:54,203 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-08 08:14:54,203 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {33749#true} {33749#true} #783#return; {33749#true} is VALID [2022-04-08 08:14:54,203 INFO L272 TraceCheckUtils]: 4: Hoare triple {33749#true} call #t~ret81 := main(); {33749#true} is VALID [2022-04-08 08:14:54,203 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {33749#true} is VALID [2022-04-08 08:14:54,204 INFO L272 TraceCheckUtils]: 6: Hoare triple {33749#true} call _BLAST_init(); {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:54,204 INFO L290 TraceCheckUtils]: 7: Hoare triple {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-08 08:14:54,204 INFO L290 TraceCheckUtils]: 8: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-08 08:14:54,205 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {33749#true} {33749#true} #715#return; {33749#true} is VALID [2022-04-08 08:14:54,205 INFO L290 TraceCheckUtils]: 10: Hoare triple {33749#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-08 08:14:54,205 INFO L290 TraceCheckUtils]: 11: Hoare triple {33749#true} assume !(0 == ~irp_choice~0); {33749#true} is VALID [2022-04-08 08:14:54,205 INFO L272 TraceCheckUtils]: 12: Hoare triple {33749#true} call stub_driver_init(); {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:54,205 INFO L290 TraceCheckUtils]: 13: Hoare triple {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-08 08:14:54,205 INFO L290 TraceCheckUtils]: 14: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-08 08:14:54,205 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {33749#true} {33749#true} #717#return; {33749#true} is VALID [2022-04-08 08:14:54,206 INFO L290 TraceCheckUtils]: 16: Hoare triple {33749#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {33749#true} is VALID [2022-04-08 08:14:54,206 INFO L290 TraceCheckUtils]: 17: Hoare triple {33749#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {33749#true} is VALID [2022-04-08 08:14:54,206 INFO L290 TraceCheckUtils]: 18: Hoare triple {33749#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {33749#true} is VALID [2022-04-08 08:14:54,206 INFO L290 TraceCheckUtils]: 19: Hoare triple {33749#true} assume 3 == ~tmp_ndt_3~0; {33749#true} is VALID [2022-04-08 08:14:54,207 INFO L272 TraceCheckUtils]: 20: Hoare triple {33749#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:54,207 INFO L290 TraceCheckUtils]: 21: Hoare triple {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {33749#true} is VALID [2022-04-08 08:14:54,207 INFO L290 TraceCheckUtils]: 22: Hoare triple {33749#true} assume !(0 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-08 08:14:54,207 INFO L290 TraceCheckUtils]: 23: Hoare triple {33749#true} assume !(23 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-08 08:14:54,207 INFO L290 TraceCheckUtils]: 24: Hoare triple {33749#true} assume !(2 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-08 08:14:54,207 INFO L290 TraceCheckUtils]: 25: Hoare triple {33749#true} assume 1 == ~irpStack__MinorFunction~0; {33749#true} is VALID [2022-04-08 08:14:54,207 INFO L290 TraceCheckUtils]: 26: Hoare triple {33749#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {33749#true} is VALID [2022-04-08 08:14:54,207 INFO L290 TraceCheckUtils]: 27: Hoare triple {33749#true} #t~post18 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post18;havoc #t~post18;#t~post19 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post19;havoc #t~post19; {33749#true} is VALID [2022-04-08 08:14:54,208 INFO L272 TraceCheckUtils]: 28: Hoare triple {33749#true} call #t~ret20 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:54,208 INFO L290 TraceCheckUtils]: 29: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-08 08:14:54,208 INFO L290 TraceCheckUtils]: 30: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-08 08:14:54,208 INFO L290 TraceCheckUtils]: 31: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-08 08:14:54,208 INFO L290 TraceCheckUtils]: 32: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-08 08:14:54,208 INFO L290 TraceCheckUtils]: 33: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-08 08:14:54,208 INFO L290 TraceCheckUtils]: 34: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-08 08:14:54,208 INFO L290 TraceCheckUtils]: 35: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-08 08:14:54,208 INFO L290 TraceCheckUtils]: 36: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 08:14:54,209 INFO L290 TraceCheckUtils]: 37: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,209 INFO L290 TraceCheckUtils]: 38: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,210 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,210 INFO L290 TraceCheckUtils]: 40: Hoare triple {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret20 && #t~ret20 <= 2147483647;~status~0 := #t~ret20;havoc #t~ret20; {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,210 INFO L290 TraceCheckUtils]: 41: Hoare triple {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,210 INFO L290 TraceCheckUtils]: 42: Hoare triple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,211 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {33749#true} #723#return; {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,211 INFO L290 TraceCheckUtils]: 44: Hoare triple {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,212 INFO L290 TraceCheckUtils]: 45: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,212 INFO L290 TraceCheckUtils]: 46: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,212 INFO L290 TraceCheckUtils]: 47: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,212 INFO L290 TraceCheckUtils]: 48: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,213 INFO L290 TraceCheckUtils]: 49: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,213 INFO L290 TraceCheckUtils]: 50: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,213 INFO L290 TraceCheckUtils]: 51: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 08:14:54,213 INFO L290 TraceCheckUtils]: 52: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {33750#false} is VALID [2022-04-08 08:14:54,213 INFO L272 TraceCheckUtils]: 53: Hoare triple {33750#false} call errorFn(); {33750#false} is VALID [2022-04-08 08:14:54,213 INFO L290 TraceCheckUtils]: 54: Hoare triple {33750#false} assume !false; {33750#false} is VALID [2022-04-08 08:14:54,214 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:54,214 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:54,214 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1455204695] [2022-04-08 08:14:54,214 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1455204695] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:54,214 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:54,214 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-08 08:14:54,214 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:54,214 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1126101327] [2022-04-08 08:14:54,214 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1126101327] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:54,214 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:54,214 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-08 08:14:54,214 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [590930067] [2022-04-08 08:14:54,215 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:54,215 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-08 08:14:54,215 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:54,216 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:54,250 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:54,250 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-08 08:14:54,250 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:54,250 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-08 08:14:54,251 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-04-08 08:14:54,251 INFO L87 Difference]: Start difference. First operand 188 states and 232 transitions. Second operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:56,415 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:56,416 INFO L93 Difference]: Finished difference Result 204 states and 248 transitions. [2022-04-08 08:14:56,416 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-08 08:14:56,416 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-08 08:14:56,416 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:56,416 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:56,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 211 transitions. [2022-04-08 08:14:56,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:56,418 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 211 transitions. [2022-04-08 08:14:56,418 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 211 transitions. [2022-04-08 08:14:56,581 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 211 edges. 211 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:56,583 INFO L225 Difference]: With dead ends: 204 [2022-04-08 08:14:56,586 INFO L226 Difference]: Without dead ends: 166 [2022-04-08 08:14:56,587 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-04-08 08:14:56,587 INFO L913 BasicCegarLoop]: 161 mSDtfsCounter, 345 mSDsluCounter, 489 mSDsCounter, 0 mSdLazyCounter, 923 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 345 SdHoareTripleChecker+Valid, 650 SdHoareTripleChecker+Invalid, 1000 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 923 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:56,587 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [345 Valid, 650 Invalid, 1000 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 923 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-08 08:14:56,588 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2022-04-08 08:14:56,870 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 166. [2022-04-08 08:14:56,870 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:56,871 INFO L82 GeneralOperation]: Start isEquivalent. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 08:14:56,871 INFO L74 IsIncluded]: Start isIncluded. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 08:14:56,871 INFO L87 Difference]: Start difference. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 08:14:56,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:56,873 INFO L93 Difference]: Finished difference Result 166 states and 189 transitions. [2022-04-08 08:14:56,873 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-08 08:14:56,873 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:56,873 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:56,873 INFO L74 IsIncluded]: Start isIncluded. First operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 166 states. [2022-04-08 08:14:56,874 INFO L87 Difference]: Start difference. First operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 166 states. [2022-04-08 08:14:56,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:56,875 INFO L93 Difference]: Finished difference Result 166 states and 189 transitions. [2022-04-08 08:14:56,875 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-08 08:14:56,876 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:56,876 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:56,876 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:56,876 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:56,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 08:14:56,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 189 transitions. [2022-04-08 08:14:56,878 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 189 transitions. Word has length 55 [2022-04-08 08:14:56,878 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:56,878 INFO L478 AbstractCegarLoop]: Abstraction has 166 states and 189 transitions. [2022-04-08 08:14:56,878 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 08:14:56,878 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 166 states and 189 transitions. [2022-04-08 08:14:57,101 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 189 edges. 189 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:57,102 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-08 08:14:57,102 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-04-08 08:14:57,102 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:57,102 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:57,102 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2022-04-08 08:14:57,102 INFO L403 AbstractCegarLoop]: === Iteration 22 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:57,103 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:57,103 INFO L85 PathProgramCache]: Analyzing trace with hash 1918234721, now seen corresponding path program 1 times [2022-04-08 08:14:57,103 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:57,103 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [112196176] [2022-04-08 08:14:57,103 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:57,103 INFO L85 PathProgramCache]: Analyzing trace with hash 1918234721, now seen corresponding path program 2 times [2022-04-08 08:14:57,103 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:57,103 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2049795701] [2022-04-08 08:14:57,103 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:57,103 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:57,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:57,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 08:14:57,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:57,196 INFO L290 TraceCheckUtils]: 0: Hoare triple {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-08 08:14:57,196 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 08:14:57,196 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #783#return; {34884#true} is VALID [2022-04-08 08:14:57,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 08:14:57,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:57,216 INFO L290 TraceCheckUtils]: 0: Hoare triple {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-08 08:14:57,216 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 08:14:57,216 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #715#return; {34884#true} is VALID [2022-04-08 08:14:57,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 08:14:57,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:57,226 INFO L290 TraceCheckUtils]: 0: Hoare triple {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-08 08:14:57,226 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 08:14:57,226 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #717#return; {34884#true} is VALID [2022-04-08 08:14:57,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-08 08:14:57,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:57,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-08 08:14:57,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:57,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-08 08:14:57,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 08:14:57,293 INFO L290 TraceCheckUtils]: 0: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-08 08:14:57,293 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 08:14:57,294 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-08 08:14:57,294 INFO L290 TraceCheckUtils]: 0: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-08 08:14:57,294 INFO L272 TraceCheckUtils]: 1: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:57,294 INFO L290 TraceCheckUtils]: 2: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-08 08:14:57,294 INFO L290 TraceCheckUtils]: 3: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 08:14:57,294 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-08 08:14:57,295 INFO L290 TraceCheckUtils]: 5: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-08 08:14:57,295 INFO L290 TraceCheckUtils]: 6: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-08 08:14:57,296 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-08 08:14:57,296 INFO L290 TraceCheckUtils]: 0: Hoare triple {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {34884#true} is VALID [2022-04-08 08:14:57,296 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume 0 != ~compRegistered~0; {34884#true} is VALID [2022-04-08 08:14:57,297 INFO L272 TraceCheckUtils]: 2: Hoare triple {34884#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:57,297 INFO L290 TraceCheckUtils]: 3: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-08 08:14:57,297 INFO L272 TraceCheckUtils]: 4: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:57,297 INFO L290 TraceCheckUtils]: 5: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-08 08:14:57,297 INFO L290 TraceCheckUtils]: 6: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 08:14:57,298 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-08 08:14:57,299 INFO L290 TraceCheckUtils]: 8: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-08 08:14:57,300 INFO L290 TraceCheckUtils]: 9: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-08 08:14:57,300 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-08 08:14:57,303 INFO L290 TraceCheckUtils]: 11: Hoare triple {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-08 08:14:57,304 INFO L290 TraceCheckUtils]: 12: Hoare triple {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {34885#false} is VALID [2022-04-08 08:14:57,304 INFO L290 TraceCheckUtils]: 13: Hoare triple {34885#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {34885#false} is VALID [2022-04-08 08:14:57,304 INFO L290 TraceCheckUtils]: 14: Hoare triple {34885#false} assume 0 == ~tmp_ndt_6~0; {34885#false} is VALID [2022-04-08 08:14:57,304 INFO L290 TraceCheckUtils]: 15: Hoare triple {34885#false} ~returnVal2~0 := 0; {34885#false} is VALID [2022-04-08 08:14:57,304 INFO L290 TraceCheckUtils]: 16: Hoare triple {34885#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {34885#false} is VALID [2022-04-08 08:14:57,304 INFO L290 TraceCheckUtils]: 17: Hoare triple {34885#false} #res := ~returnVal2~0; {34885#false} is VALID [2022-04-08 08:14:57,304 INFO L290 TraceCheckUtils]: 18: Hoare triple {34885#false} assume true; {34885#false} is VALID [2022-04-08 08:14:57,304 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {34885#false} {34884#true} #755#return; {34885#false} is VALID [2022-04-08 08:14:57,306 INFO L272 TraceCheckUtils]: 0: Hoare triple {34884#true} call ULTIMATE.init(); {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 08:14:57,306 INFO L290 TraceCheckUtils]: 1: Hoare triple {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-08 08:14:57,306 INFO L290 TraceCheckUtils]: 2: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 08:14:57,306 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {34884#true} {34884#true} #783#return; {34884#true} is VALID [2022-04-08 08:14:57,306 INFO L272 TraceCheckUtils]: 4: Hoare triple {34884#true} call #t~ret81 := main(); {34884#true} is VALID [2022-04-08 08:14:57,306 INFO L290 TraceCheckUtils]: 5: Hoare triple {34884#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {34884#true} is VALID [2022-04-08 08:14:57,307 INFO L272 TraceCheckUtils]: 6: Hoare triple {34884#true} call _BLAST_init(); {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:57,307 INFO L290 TraceCheckUtils]: 7: Hoare triple {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-08 08:14:57,307 INFO L290 TraceCheckUtils]: 8: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 08:14:57,307 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {34884#true} {34884#true} #715#return; {34884#true} is VALID [2022-04-08 08:14:57,307 INFO L290 TraceCheckUtils]: 10: Hoare triple {34884#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-08 08:14:57,307 INFO L290 TraceCheckUtils]: 11: Hoare triple {34884#true} assume !(0 == ~irp_choice~0); {34884#true} is VALID [2022-04-08 08:14:57,308 INFO L272 TraceCheckUtils]: 12: Hoare triple {34884#true} call stub_driver_init(); {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:57,308 INFO L290 TraceCheckUtils]: 13: Hoare triple {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-08 08:14:57,308 INFO L290 TraceCheckUtils]: 14: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 08:14:57,308 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {34884#true} {34884#true} #717#return; {34884#true} is VALID [2022-04-08 08:14:57,308 INFO L290 TraceCheckUtils]: 16: Hoare triple {34884#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {34884#true} is VALID [2022-04-08 08:14:57,308 INFO L290 TraceCheckUtils]: 17: Hoare triple {34884#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {34884#true} is VALID [2022-04-08 08:14:57,308 INFO L290 TraceCheckUtils]: 18: Hoare triple {34884#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {34884#true} is VALID [2022-04-08 08:14:57,308 INFO L290 TraceCheckUtils]: 19: Hoare triple {34884#true} assume 3 == ~tmp_ndt_3~0; {34884#true} is VALID [2022-04-08 08:14:57,308 INFO L272 TraceCheckUtils]: 20: Hoare triple {34884#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {34884#true} is VALID [2022-04-08 08:14:57,308 INFO L290 TraceCheckUtils]: 21: Hoare triple {34884#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {34884#true} is VALID [2022-04-08 08:14:57,308 INFO L290 TraceCheckUtils]: 22: Hoare triple {34884#true} assume 0 == ~irpStack__MinorFunction~0; {34884#true} is VALID [2022-04-08 08:14:57,308 INFO L290 TraceCheckUtils]: 23: Hoare triple {34884#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {34884#true} is VALID [2022-04-08 08:14:57,309 INFO L290 TraceCheckUtils]: 24: Hoare triple {34884#true} assume !(~s~0 != ~NP~0); {34884#true} is VALID [2022-04-08 08:14:57,309 INFO L290 TraceCheckUtils]: 25: Hoare triple {34884#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {34884#true} is VALID [2022-04-08 08:14:57,309 INFO L290 TraceCheckUtils]: 26: Hoare triple {34884#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {34884#true} is VALID [2022-04-08 08:14:57,309 INFO L272 TraceCheckUtils]: 27: Hoare triple {34884#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 08:14:57,309 INFO L290 TraceCheckUtils]: 28: Hoare triple {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {34884#true} is VALID [2022-04-08 08:14:57,309 INFO L290 TraceCheckUtils]: 29: Hoare triple {34884#true} assume 0 != ~compRegistered~0; {34884#true} is VALID [2022-04-08 08:14:57,310 INFO L272 TraceCheckUtils]: 30: Hoare triple {34884#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:57,310 INFO L290 TraceCheckUtils]: 31: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-08 08:14:57,310 INFO L272 TraceCheckUtils]: 32: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 08:14:57,311 INFO L290 TraceCheckUtils]: 33: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-08 08:14:57,311 INFO L290 TraceCheckUtils]: 34: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 08:14:57,311 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-08 08:14:57,311 INFO L290 TraceCheckUtils]: 36: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-08 08:14:57,311 INFO L290 TraceCheckUtils]: 37: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-08 08:14:57,312 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-08 08:14:57,312 INFO L290 TraceCheckUtils]: 39: Hoare triple {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-08 08:14:57,313 INFO L290 TraceCheckUtils]: 40: Hoare triple {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {34885#false} is VALID [2022-04-08 08:14:57,313 INFO L290 TraceCheckUtils]: 41: Hoare triple {34885#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {34885#false} is VALID [2022-04-08 08:14:57,313 INFO L290 TraceCheckUtils]: 42: Hoare triple {34885#false} assume 0 == ~tmp_ndt_6~0; {34885#false} is VALID [2022-04-08 08:14:57,313 INFO L290 TraceCheckUtils]: 43: Hoare triple {34885#false} ~returnVal2~0 := 0; {34885#false} is VALID [2022-04-08 08:14:57,313 INFO L290 TraceCheckUtils]: 44: Hoare triple {34885#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {34885#false} is VALID [2022-04-08 08:14:57,313 INFO L290 TraceCheckUtils]: 45: Hoare triple {34885#false} #res := ~returnVal2~0; {34885#false} is VALID [2022-04-08 08:14:57,313 INFO L290 TraceCheckUtils]: 46: Hoare triple {34885#false} assume true; {34885#false} is VALID [2022-04-08 08:14:57,313 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {34885#false} {34884#true} #755#return; {34885#false} is VALID [2022-04-08 08:14:57,313 INFO L290 TraceCheckUtils]: 48: Hoare triple {34885#false} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {34885#false} is VALID [2022-04-08 08:14:57,313 INFO L290 TraceCheckUtils]: 49: Hoare triple {34885#false} assume !(259 == ~__cil_tmp23~0); {34885#false} is VALID [2022-04-08 08:14:57,313 INFO L290 TraceCheckUtils]: 50: Hoare triple {34885#false} assume ~status~0 >= 0; {34885#false} is VALID [2022-04-08 08:14:57,313 INFO L290 TraceCheckUtils]: 51: Hoare triple {34885#false} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {34885#false} is VALID [2022-04-08 08:14:57,314 INFO L290 TraceCheckUtils]: 52: Hoare triple {34885#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {34885#false} is VALID [2022-04-08 08:14:57,314 INFO L272 TraceCheckUtils]: 53: Hoare triple {34885#false} call IofCompleteRequest(~Irp, 0); {34885#false} is VALID [2022-04-08 08:14:57,314 INFO L290 TraceCheckUtils]: 54: Hoare triple {34885#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {34885#false} is VALID [2022-04-08 08:14:57,314 INFO L290 TraceCheckUtils]: 55: Hoare triple {34885#false} assume !(~s~0 == ~NP~0); {34885#false} is VALID [2022-04-08 08:14:57,314 INFO L272 TraceCheckUtils]: 56: Hoare triple {34885#false} call errorFn(); {34885#false} is VALID [2022-04-08 08:14:57,314 INFO L290 TraceCheckUtils]: 57: Hoare triple {34885#false} assume !false; {34885#false} is VALID [2022-04-08 08:14:57,314 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 08:14:57,314 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 08:14:57,314 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2049795701] [2022-04-08 08:14:57,315 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2049795701] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:57,315 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:57,315 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-08 08:14:57,315 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 08:14:57,315 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [112196176] [2022-04-08 08:14:57,315 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [112196176] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 08:14:57,315 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 08:14:57,315 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-08 08:14:57,315 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1713118898] [2022-04-08 08:14:57,315 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 08:14:57,315 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-08 08:14:57,316 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 08:14:57,316 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:57,353 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:57,353 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-08 08:14:57,353 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:57,354 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-08 08:14:57,354 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-08 08:14:57,354 INFO L87 Difference]: Start difference. First operand 166 states and 189 transitions. Second operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:58,303 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:58,303 INFO L93 Difference]: Finished difference Result 202 states and 230 transitions. [2022-04-08 08:14:58,303 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-08 08:14:58,303 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-08 08:14:58,303 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 08:14:58,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:58,305 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 197 transitions. [2022-04-08 08:14:58,305 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:58,306 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 197 transitions. [2022-04-08 08:14:58,306 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 197 transitions. [2022-04-08 08:14:58,445 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 197 edges. 197 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:58,447 INFO L225 Difference]: With dead ends: 202 [2022-04-08 08:14:58,448 INFO L226 Difference]: Without dead ends: 160 [2022-04-08 08:14:58,448 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-08 08:14:58,448 INFO L913 BasicCegarLoop]: 130 mSDtfsCounter, 128 mSDsluCounter, 292 mSDsCounter, 0 mSdLazyCounter, 283 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 422 SdHoareTripleChecker+Invalid, 328 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 283 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-08 08:14:58,448 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [129 Valid, 422 Invalid, 328 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 283 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-08 08:14:58,449 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-04-08 08:14:58,717 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 160. [2022-04-08 08:14:58,718 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 08:14:58,718 INFO L82 GeneralOperation]: Start isEquivalent. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 08:14:58,718 INFO L74 IsIncluded]: Start isIncluded. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 08:14:58,718 INFO L87 Difference]: Start difference. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 08:14:58,720 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:58,720 INFO L93 Difference]: Finished difference Result 160 states and 180 transitions. [2022-04-08 08:14:58,720 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-08 08:14:58,720 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:58,720 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:58,720 INFO L74 IsIncluded]: Start isIncluded. First operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 160 states. [2022-04-08 08:14:58,721 INFO L87 Difference]: Start difference. First operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 160 states. [2022-04-08 08:14:58,722 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 08:14:58,722 INFO L93 Difference]: Finished difference Result 160 states and 180 transitions. [2022-04-08 08:14:58,722 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-08 08:14:58,722 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 08:14:58,722 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 08:14:58,722 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 08:14:58,723 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 08:14:58,723 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 08:14:58,724 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 180 transitions. [2022-04-08 08:14:58,725 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 180 transitions. Word has length 58 [2022-04-08 08:14:58,727 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 08:14:58,727 INFO L478 AbstractCegarLoop]: Abstraction has 160 states and 180 transitions. [2022-04-08 08:14:58,727 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 08:14:58,727 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 160 states and 180 transitions. [2022-04-08 08:14:58,941 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 180 edges. 180 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 08:14:58,941 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-08 08:14:58,942 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-04-08 08:14:58,942 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 08:14:58,942 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 08:14:58,942 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2022-04-08 08:14:58,942 INFO L403 AbstractCegarLoop]: === Iteration 23 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 08:14:58,942 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 08:14:58,942 INFO L85 PathProgramCache]: Analyzing trace with hash 1199488421, now seen corresponding path program 1 times [2022-04-08 08:14:58,943 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 08:14:58,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1117440593] [2022-04-08 08:14:58,943 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 08:14:58,943 INFO L85 PathProgramCache]: Analyzing trace with hash 1199488421, now seen corresponding path program 2 times [2022-04-08 08:14:58,943 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 08:14:58,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1818237685] [2022-04-08 08:14:58,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 08:14:58,943 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 08:14:58,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-04-08 08:14:58,965 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-04-08 08:14:58,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-04-08 08:14:59,006 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-04-08 08:14:59,006 INFO L130 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found a feasible trace [2022-04-08 08:14:59,006 INFO L618 BasicCegarLoop]: Counterexample is feasible [2022-04-08 08:14:59,008 INFO L788 garLoopResultBuilder]: Registering result UNSAFE for location errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-04-08 08:14:59,010 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22 [2022-04-08 08:14:59,012 INFO L719 BasicCegarLoop]: Path program histogram: [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2] [2022-04-08 08:14:59,014 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-04-08 08:14:59,031 WARN L170 areAnnotationChecker]: reach_errorENTRY has no Hoare annotation [2022-04-08 08:14:59,031 WARN L170 areAnnotationChecker]: KeSetEventENTRY has no Hoare annotation [2022-04-08 08:14:59,031 WARN L170 areAnnotationChecker]: KbFilter_CompleteENTRY has no Hoare annotation [2022-04-08 08:14:59,031 WARN L170 areAnnotationChecker]: stub_driver_initENTRY has no Hoare annotation [2022-04-08 08:14:59,031 WARN L170 areAnnotationChecker]: KbFilter_PowerENTRY has no Hoare annotation [2022-04-08 08:14:59,031 WARN L170 areAnnotationChecker]: _BLAST_initENTRY has no Hoare annotation [2022-04-08 08:14:59,031 WARN L170 areAnnotationChecker]: errorFnENTRY has no Hoare annotation [2022-04-08 08:14:59,031 WARN L170 areAnnotationChecker]: errorFnENTRY has no Hoare annotation [2022-04-08 08:14:59,031 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2022-04-08 08:14:59,031 WARN L170 areAnnotationChecker]: IofCallDriverENTRY has no Hoare annotation [2022-04-08 08:14:59,031 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredENTRY has no Hoare annotation [2022-04-08 08:14:59,031 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredENTRY has no Hoare annotation [2022-04-08 08:14:59,031 WARN L170 areAnnotationChecker]: PoCallDriverENTRY has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseENTRY has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlENTRY has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectENTRY has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: IofCompleteRequestENTRY has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughENTRY has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: KbFilter_PnPENTRY has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: reach_errorFINAL has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: KeSetEventFINAL has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: stub_driver_initFINAL has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: _BLAST_initFINAL has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: errorFnFINAL has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: L475-1 has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: L475 has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: L475 has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-08 08:14:59,032 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: KeSetEventEXIT has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L624-1 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: stub_driver_initEXIT has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: _BLAST_initEXIT has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 08:14:59,033 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L489-1 has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L756 has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L756 has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L754-1 has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L645 has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L645 has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L935 has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L935 has no Hoare annotation [2022-04-08 08:14:59,034 WARN L170 areAnnotationChecker]: L883 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L883 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L582 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L582 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L589 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L589 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L562-1 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L562 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L562 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L678-1 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L107 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L109 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L109 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: KbFilter_CompleteFINAL has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L342 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L342 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L724 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L724 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L428 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L814-1 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L594-1 has no Hoare annotation [2022-04-08 08:14:59,035 WARN L170 areAnnotationChecker]: L180-1 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L225-1 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L241-1 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L256-1 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L734-1 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L546-1 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L328 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L328 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L491-1 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L504 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L504 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L756-1 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L653 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L644 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L644 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L884 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-08 08:14:59,036 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2022-04-08 08:14:59,037 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2022-04-08 08:14:59,037 WARN L170 areAnnotationChecker]: L684 has no Hoare annotation [2022-04-08 08:14:59,037 WARN L170 areAnnotationChecker]: L684 has no Hoare annotation [2022-04-08 08:14:59,037 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2022-04-08 08:14:59,037 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2022-04-08 08:14:59,037 WARN L170 areAnnotationChecker]: L110 has no Hoare annotation [2022-04-08 08:14:59,037 WARN L170 areAnnotationChecker]: L112 has no Hoare annotation [2022-04-08 08:14:59,037 WARN L170 areAnnotationChecker]: L112 has no Hoare annotation [2022-04-08 08:14:59,037 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L351 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L351 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L734 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L734 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L709 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L709 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: PoCallDriverFINAL has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2022-04-08 08:14:59,038 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L740 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L740 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: IofCallDriverFINAL has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L413 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L413 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L505 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L760 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L760 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L770 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L660 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L660 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L997 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L997 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L1003 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L1003 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L892 has no Hoare annotation [2022-04-08 08:14:59,039 WARN L170 areAnnotationChecker]: L892 has no Hoare annotation [2022-04-08 08:14:59,040 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2022-04-08 08:14:59,040 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2022-04-08 08:14:59,040 WARN L170 areAnnotationChecker]: L596 has no Hoare annotation [2022-04-08 08:14:59,040 WARN L170 areAnnotationChecker]: L596 has no Hoare annotation [2022-04-08 08:14:59,040 WARN L170 areAnnotationChecker]: L997-1 has no Hoare annotation [2022-04-08 08:14:59,040 WARN L170 areAnnotationChecker]: L267 has no Hoare annotation [2022-04-08 08:14:59,040 WARN L170 areAnnotationChecker]: L684-1 has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: L221 has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: L221 has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: L113 has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: L115 has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: L115 has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: L356 has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: L356 has no Hoare annotation [2022-04-08 08:14:59,043 WARN L170 areAnnotationChecker]: PoCallDriverEXIT has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: L604 has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: L606 has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: L192-1 has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: L231-1 has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: L247-1 has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: L262-1 has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: L740-1 has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2022-04-08 08:14:59,044 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2022-04-08 08:14:59,045 WARN L170 areAnnotationChecker]: L524 has no Hoare annotation [2022-04-08 08:14:59,045 WARN L170 areAnnotationChecker]: L524 has no Hoare annotation [2022-04-08 08:14:59,045 WARN L170 areAnnotationChecker]: L510 has no Hoare annotation [2022-04-08 08:14:59,045 WARN L170 areAnnotationChecker]: L512 has no Hoare annotation [2022-04-08 08:14:59,045 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2022-04-08 08:14:59,045 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2022-04-08 08:14:59,045 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2022-04-08 08:14:59,045 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2022-04-08 08:14:59,045 WARN L170 areAnnotationChecker]: L775 has no Hoare annotation [2022-04-08 08:14:59,045 WARN L170 areAnnotationChecker]: L777 has no Hoare annotation [2022-04-08 08:14:59,045 WARN L170 areAnnotationChecker]: L660-1 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L1003-1 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L903 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L903 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlFINAL has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: KbFilter_PnPFINAL has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughFINAL has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L225 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L225 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2022-04-08 08:14:59,046 WARN L170 areAnnotationChecker]: L357 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L357 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L361 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L361 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectFINAL has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: KbFilter_PowerFINAL has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseFINAL has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L956-2 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L956-2 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlEXIT has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: KbFilter_PnPEXIT has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughEXIT has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughEXIT has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L256 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L256 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2022-04-08 08:14:59,047 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L383 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L366 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L366 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectEXIT has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L197-2 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L197-2 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: KbFilter_PowerEXIT has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseEXIT has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseEXIT has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L959-1 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L917 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L917 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L398 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L388 has no Hoare annotation [2022-04-08 08:14:59,048 WARN L170 areAnnotationChecker]: L124 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L124 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L367 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L367 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L371 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L371 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L199-1 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L206 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L206 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L205 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L393 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L546 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L546 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L814 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L814 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L374 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-04-08 08:14:59,049 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L447 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L447 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L931 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L931 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L133 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L133 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L453 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L453 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L136 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L136 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L142 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L142 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L145 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L145 has no Hoare annotation [2022-04-08 08:14:59,050 WARN L170 areAnnotationChecker]: L148 has no Hoare annotation [2022-04-08 08:14:59,051 WARN L170 areAnnotationChecker]: L148 has no Hoare annotation [2022-04-08 08:14:59,051 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-04-08 08:14:59,051 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-04-08 08:14:59,051 WARN L170 areAnnotationChecker]: L154 has no Hoare annotation [2022-04-08 08:14:59,051 WARN L170 areAnnotationChecker]: L154 has no Hoare annotation [2022-04-08 08:14:59,051 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2022-04-08 08:14:59,051 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2022-04-08 08:14:59,051 WARN L170 areAnnotationChecker]: L160 has no Hoare annotation [2022-04-08 08:14:59,051 WARN L170 areAnnotationChecker]: L160 has no Hoare annotation [2022-04-08 08:14:59,051 WARN L170 areAnnotationChecker]: L163 has no Hoare annotation [2022-04-08 08:14:59,051 WARN L170 areAnnotationChecker]: L163 has no Hoare annotation [2022-04-08 08:14:59,051 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-04-08 08:14:59,051 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-04-08 08:14:59,051 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-04-08 08:14:59,054 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 08.04 08:14:59 BoogieIcfgContainer [2022-04-08 08:14:59,055 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-04-08 08:14:59,056 INFO L158 Benchmark]: Toolchain (without parser) took 72311.77ms. Allocated memory was 179.3MB in the beginning and 385.9MB in the end (delta: 206.6MB). Free memory was 127.4MB in the beginning and 351.1MB in the end (delta: -223.7MB). Peak memory consumption was 206.8MB. Max. memory is 8.0GB. [2022-04-08 08:14:59,056 INFO L158 Benchmark]: CDTParser took 0.09ms. Allocated memory is still 179.3MB. Free memory was 144.8MB in the beginning and 144.7MB in the end (delta: 71.4kB). There was no memory consumed. Max. memory is 8.0GB. [2022-04-08 08:14:59,056 INFO L158 Benchmark]: CACSL2BoogieTranslator took 346.48ms. Allocated memory was 179.3MB in the beginning and 216.0MB in the end (delta: 36.7MB). Free memory was 127.2MB in the beginning and 182.8MB in the end (delta: -55.6MB). Peak memory consumption was 15.5MB. Max. memory is 8.0GB. [2022-04-08 08:14:59,056 INFO L158 Benchmark]: Boogie Preprocessor took 106.43ms. Allocated memory is still 216.0MB. Free memory was 182.8MB in the beginning and 179.6MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-04-08 08:14:59,056 INFO L158 Benchmark]: RCFGBuilder took 861.89ms. Allocated memory is still 216.0MB. Free memory was 179.6MB in the beginning and 135.9MB in the end (delta: 43.8MB). Peak memory consumption was 44.0MB. Max. memory is 8.0GB. [2022-04-08 08:14:59,056 INFO L158 Benchmark]: TraceAbstraction took 70986.00ms. Allocated memory was 216.0MB in the beginning and 385.9MB in the end (delta: 169.9MB). Free memory was 135.5MB in the beginning and 351.1MB in the end (delta: -215.6MB). Peak memory consumption was 178.7MB. Max. memory is 8.0GB. [2022-04-08 08:14:59,058 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.09ms. Allocated memory is still 179.3MB. Free memory was 144.8MB in the beginning and 144.7MB in the end (delta: 71.4kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 346.48ms. Allocated memory was 179.3MB in the beginning and 216.0MB in the end (delta: 36.7MB). Free memory was 127.2MB in the beginning and 182.8MB in the end (delta: -55.6MB). Peak memory consumption was 15.5MB. Max. memory is 8.0GB. * Boogie Preprocessor took 106.43ms. Allocated memory is still 216.0MB. Free memory was 182.8MB in the beginning and 179.6MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 861.89ms. Allocated memory is still 216.0MB. Free memory was 179.6MB in the beginning and 135.9MB in the end (delta: 43.8MB). Peak memory consumption was 44.0MB. Max. memory is 8.0GB. * TraceAbstraction took 70986.00ms. Allocated memory was 216.0MB in the beginning and 385.9MB in the end (delta: 169.9MB). Free memory was 135.5MB in the beginning and 351.1MB in the end (delta: -215.6MB). Peak memory consumption was 178.7MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 1013]: a call to reach_error is reachable a call to reach_error is reachable We found a FailurePath: [L23] int KernelMode ; [L24] int Executive ; [L25] int DevicePowerState ; [L26] int s ; [L27] int UNLOADED ; [L28] int NP ; [L29] int DC ; [L30] int SKIP1 ; [L31] int SKIP2 ; [L32] int MPR1 ; [L33] int MPR3 ; [L34] int IPC ; [L35] int pended ; [L36] int compFptr ; [L37] int compRegistered ; [L38] int lowerDriverReturn ; [L39] int setEventCalled ; [L40] int customIrp ; [L41] int myStatus ; [L294] int status ; [L295] int irp = __VERIFIER_nondet_int() ; [L296] int pirp ; [L297] int pirp__IoStatus__Status ; [L298] int irp_choice = __VERIFIER_nondet_int() ; [L299] int devobj = __VERIFIER_nondet_int() ; [L300] int __cil_tmp8 ; [L302] KernelMode = 0 [L303] Executive = 0 [L304] DevicePowerState = 1 [L305] s = 0 [L306] UNLOADED = 0 [L307] NP = 0 [L308] DC = 0 [L309] SKIP1 = 0 [L310] SKIP2 = 0 [L311] MPR1 = 0 [L312] MPR3 = 0 [L313] IPC = 0 [L314] pended = 0 [L315] compFptr = 0 [L316] compRegistered = 0 [L317] lowerDriverReturn = 0 [L318] setEventCalled = 0 [L319] customIrp = 0 [L320] myStatus = 0 [L324] status = 0 [L325] pirp = irp [L326] CALL _BLAST_init() [L61] UNLOADED = 0 [L62] NP = 1 [L63] DC = 2 [L64] SKIP1 = 3 [L65] SKIP2 = 4 [L66] MPR1 = 5 [L67] MPR3 = 6 [L68] IPC = 7 [L69] s = UNLOADED [L70] pended = 0 [L71] compFptr = 0 [L72] compRegistered = 0 [L73] lowerDriverReturn = 0 [L74] setEventCalled = 0 [L75] customIrp = 0 [L326] RET _BLAST_init() [L328] COND TRUE status >= 0 [L329] s = NP [L330] customIrp = 0 [L331] setEventCalled = customIrp [L332] lowerDriverReturn = setEventCalled [L333] compRegistered = lowerDriverReturn [L334] pended = compRegistered [L335] pirp__IoStatus__Status = 0 [L336] myStatus = 0 [L337] COND FALSE !(irp_choice == 0) [L342] CALL stub_driver_init() [L47] s = NP [L48] pended = 0 [L49] compFptr = 0 [L50] compRegistered = 0 [L51] lowerDriverReturn = 0 [L52] setEventCalled = 0 [L53] customIrp = 0 [L342] RET stub_driver_init() [L345] COND FALSE !(status < 0) [L349] int tmp_ndt_1; [L350] tmp_ndt_1 = __VERIFIER_nondet_int() [L351] COND FALSE !(tmp_ndt_1 == 0) [L354] int tmp_ndt_2; [L355] tmp_ndt_2 = __VERIFIER_nondet_int() [L356] COND FALSE !(tmp_ndt_2 == 1) [L359] int tmp_ndt_3; [L360] tmp_ndt_3 = __VERIFIER_nondet_int() [L361] COND TRUE tmp_ndt_3 == 3 [L388] CALL, EXPR KbFilter_PnP(devobj, pirp) [L80] int devExt ; [L81] int irpStack ; [L82] int status ; [L83] int event = __VERIFIER_nondet_int() ; [L84] int DeviceObject__DeviceExtension = __VERIFIER_nondet_int() ; [L85] int Irp__Tail__Overlay__CurrentStackLocation = __VERIFIER_nondet_int() ; [L86] int irpStack__MinorFunction = __VERIFIER_nondet_int() ; [L87] int devExt__TopOfStack = __VERIFIER_nondet_int() ; [L88] int devExt__Started ; [L89] int devExt__Removed ; [L90] int devExt__SurpriseRemoved ; [L91] int Irp__IoStatus__Status ; [L92] int Irp__IoStatus__Information ; [L93] int Irp__CurrentLocation = __VERIFIER_nondet_int() ; [L94] int irpSp ; [L95] int nextIrpSp ; [L96] int nextIrpSp__Control ; [L97] int irpSp___0 ; [L98] int irpSp__Context ; [L99] int irpSp__Control ; [L100] long __cil_tmp23 ; [L103] status = 0 [L104] devExt = DeviceObject__DeviceExtension [L105] irpStack = Irp__Tail__Overlay__CurrentStackLocation [L106] COND FALSE !(irpStack__MinorFunction == 0) [L109] COND FALSE !(irpStack__MinorFunction == 23) [L112] COND TRUE irpStack__MinorFunction == 2 [L236] devExt__Removed = 1 [L237] COND TRUE s == NP [L238] s = SKIP1 [L245] Irp__CurrentLocation ++ [L246] Irp__Tail__Overlay__CurrentStackLocation ++ [L247] CALL IofCallDriver(devExt__TopOfStack, Irp) [L483] int returnVal2 ; [L484] int compRetStatus ; [L485] int lcontext = __VERIFIER_nondet_int() ; [L486] long long __cil_tmp7 ; [L489] COND FALSE !(\read(compRegistered)) [L502] int tmp_ndt_6; [L503] tmp_ndt_6 = __VERIFIER_nondet_int() [L504] COND FALSE !(tmp_ndt_6 == 0) [L507] int tmp_ndt_7; [L508] tmp_ndt_7 = __VERIFIER_nondet_int() [L509] COND TRUE tmp_ndt_7 == 1 [L518] returnVal2 = -1073741823 [L528] COND FALSE !(s == NP) [L532] COND FALSE !(s == MPR1) [L541] COND TRUE s == SKIP1 [L542] s = SKIP2 [L543] lowerDriverReturn = returnVal2 [L551] return (returnVal2); [L247] RET IofCallDriver(devExt__TopOfStack, Irp) [L248] status = 0 [L290] return (status); [L388] RET, EXPR KbFilter_PnP(devobj, pirp) [L388] status = KbFilter_PnP(devobj, pirp) [L412] COND FALSE !(pended == 1) [L420] COND FALSE !(pended == 1) [L428] COND TRUE s != UNLOADED [L429] COND TRUE status != -1 [L430] COND FALSE !(s != SKIP2) [L440] COND FALSE !(pended == 1) [L447] COND FALSE !(s == DC) [L452] COND TRUE status != lowerDriverReturn [L453] CALL errorFn() [L1013] reach_error() - StatisticsResult: Ultimate Automizer benchmark data CFG has 19 procedures, 243 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 70.9s, OverallIterations: 23, TraceHistogramMax: 1, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 51.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 10321 SdHoareTripleChecker+Valid, 14.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 10301 mSDsluCounter, 12817 SdHoareTripleChecker+Invalid, 14.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 7681 mSDsCounter, 1995 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 15376 IncrementalHoareTripleChecker+Invalid, 17371 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1995 mSolverCounterUnsat, 5136 mSDtfsCounter, 15376 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 468 GetRequests, 198 SyntacticMatches, 1 SemanticMatches, 269 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 447 ImplicationChecksByTransitivity, 3.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=344occurred in iteration=3, InterpolantAutomatonStates: 230, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 6.0s AutomataMinimizationTime, 22 MinimizatonAttempts, 227 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: No data available, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2022-04-08 08:14:59,096 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...