/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationQvasr_64.epf -i ../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-34549b5 [2022-04-08 14:46:34,309 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-04-08 14:46:34,339 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-04-08 14:46:34,388 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-04-08 14:46:34,388 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-04-08 14:46:34,389 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-04-08 14:46:34,390 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-04-08 14:46:34,401 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-04-08 14:46:34,402 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-04-08 14:46:34,408 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-04-08 14:46:34,409 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-04-08 14:46:34,410 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-04-08 14:46:34,410 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-04-08 14:46:34,412 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-04-08 14:46:34,413 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-04-08 14:46:34,415 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-04-08 14:46:34,416 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-04-08 14:46:34,416 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-04-08 14:46:34,420 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-04-08 14:46:34,424 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-04-08 14:46:34,425 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-04-08 14:46:34,427 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-04-08 14:46:34,427 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-04-08 14:46:34,428 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-04-08 14:46:34,429 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-04-08 14:46:34,433 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-04-08 14:46:34,433 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-04-08 14:46:34,434 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-04-08 14:46:34,435 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-04-08 14:46:34,435 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-04-08 14:46:34,436 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-04-08 14:46:34,436 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-04-08 14:46:34,438 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-04-08 14:46:34,438 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-04-08 14:46:34,439 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-04-08 14:46:34,439 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-04-08 14:46:34,440 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-04-08 14:46:34,440 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-04-08 14:46:34,440 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-04-08 14:46:34,440 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-04-08 14:46:34,441 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-04-08 14:46:34,442 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-04-08 14:46:34,443 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationQvasr_64.epf [2022-04-08 14:46:34,453 INFO L113 SettingsManager]: Loading preferences was successful [2022-04-08 14:46:34,453 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-04-08 14:46:34,454 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-04-08 14:46:34,454 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-04-08 14:46:34,454 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-04-08 14:46:34,455 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-04-08 14:46:34,455 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-04-08 14:46:34,455 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-04-08 14:46:34,455 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-04-08 14:46:34,456 INFO L138 SettingsManager]: * Use constant arrays=true [2022-04-08 14:46:34,456 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-04-08 14:46:34,456 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-04-08 14:46:34,456 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-04-08 14:46:34,456 INFO L138 SettingsManager]: * To the following directory=./dump/ [2022-04-08 14:46:34,456 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-04-08 14:46:34,457 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-08 14:46:34,457 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-04-08 14:46:34,457 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=Craig_NestedInterpolation [2022-04-08 14:46:34,457 INFO L138 SettingsManager]: * Trace refinement strategy=ACCELERATED_INTERPOLATION [2022-04-08 14:46:34,457 INFO L138 SettingsManager]: * Trace refinement strategy used in Accelerated Interpolation=CAMEL [2022-04-08 14:46:34,457 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-04-08 14:46:34,457 INFO L138 SettingsManager]: * Loop acceleration method that is used by accelerated interpolation=QVASR [2022-04-08 14:46:34,457 INFO L138 SettingsManager]: * Use separate solver for trace checks=false WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-04-08 14:46:34,702 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-04-08 14:46:34,725 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-04-08 14:46:34,727 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-04-08 14:46:34,728 INFO L271 PluginConnector]: Initializing CDTParser... [2022-04-08 14:46:34,729 INFO L275 PluginConnector]: CDTParser initialized [2022-04-08 14:46:34,730 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c [2022-04-08 14:46:34,784 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7c45698e8/ca67bd2a233046fe93179a555c5dc676/FLAG3a2132088 [2022-04-08 14:46:35,224 INFO L306 CDTParser]: Found 1 translation units. [2022-04-08 14:46:35,225 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c [2022-04-08 14:46:35,237 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7c45698e8/ca67bd2a233046fe93179a555c5dc676/FLAG3a2132088 [2022-04-08 14:46:35,249 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7c45698e8/ca67bd2a233046fe93179a555c5dc676 [2022-04-08 14:46:35,257 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-04-08 14:46:35,258 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2022-04-08 14:46:35,260 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-04-08 14:46:35,260 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-04-08 14:46:35,263 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-04-08 14:46:35,263 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.04 02:46:35" (1/1) ... [2022-04-08 14:46:35,266 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1d13aeb9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 02:46:35, skipping insertion in model container [2022-04-08 14:46:35,266 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.04 02:46:35" (1/1) ... [2022-04-08 14:46:35,271 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-04-08 14:46:35,315 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-04-08 14:46:35,529 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c[29656,29669] [2022-04-08 14:46:35,532 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-08 14:46:35,538 INFO L203 MainTranslator]: Completed pre-run [2022-04-08 14:46:35,611 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c[29656,29669] [2022-04-08 14:46:35,612 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-08 14:46:35,637 INFO L208 MainTranslator]: Completed translation [2022-04-08 14:46:35,637 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 02:46:35 WrapperNode [2022-04-08 14:46:35,638 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-04-08 14:46:35,638 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-04-08 14:46:35,638 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-04-08 14:46:35,639 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-04-08 14:46:35,648 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 02:46:35" (1/1) ... [2022-04-08 14:46:35,648 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 02:46:35" (1/1) ... [2022-04-08 14:46:35,664 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 02:46:35" (1/1) ... [2022-04-08 14:46:35,665 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 02:46:35" (1/1) ... [2022-04-08 14:46:35,706 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 02:46:35" (1/1) ... [2022-04-08 14:46:35,716 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 02:46:35" (1/1) ... [2022-04-08 14:46:35,719 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 02:46:35" (1/1) ... [2022-04-08 14:46:35,723 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-04-08 14:46:35,724 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-04-08 14:46:35,724 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-04-08 14:46:35,724 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-04-08 14:46:35,725 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 02:46:35" (1/1) ... [2022-04-08 14:46:35,734 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-08 14:46:35,742 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-08 14:46:35,750 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-04-08 14:46:35,751 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-04-08 14:46:35,781 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2022-04-08 14:46:35,781 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-04-08 14:46:35,781 INFO L138 BoogieDeclarations]: Found implementation of procedure reach_error [2022-04-08 14:46:35,781 INFO L138 BoogieDeclarations]: Found implementation of procedure stub_driver_init [2022-04-08 14:46:35,781 INFO L138 BoogieDeclarations]: Found implementation of procedure _BLAST_init [2022-04-08 14:46:35,781 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_PnP [2022-04-08 14:46:35,782 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2022-04-08 14:46:35,782 INFO L138 BoogieDeclarations]: Found implementation of procedure stubMoreProcessingRequired [2022-04-08 14:46:35,782 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2022-04-08 14:46:35,782 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2022-04-08 14:46:35,782 INFO L138 BoogieDeclarations]: Found implementation of procedure KeSetEvent [2022-04-08 14:46:35,782 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2022-04-08 14:46:35,782 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Complete [2022-04-08 14:46:35,782 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_CreateClose [2022-04-08 14:46:35,782 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_DispatchPassThrough [2022-04-08 14:46:35,782 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Power [2022-04-08 14:46:35,783 INFO L138 BoogieDeclarations]: Found implementation of procedure PoCallDriver [2022-04-08 14:46:35,783 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_InternIoCtl [2022-04-08 14:46:35,783 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2022-04-08 14:46:35,783 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2022-04-08 14:46:35,783 INFO L130 BoogieDeclarations]: Found specification of procedure __assert_fail [2022-04-08 14:46:35,783 INFO L130 BoogieDeclarations]: Found specification of procedure reach_error [2022-04-08 14:46:35,783 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-04-08 14:46:35,783 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_char [2022-04-08 14:46:35,785 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2022-04-08 14:46:35,785 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2022-04-08 14:46:35,785 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_PnP [2022-04-08 14:46:35,785 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2022-04-08 14:46:35,785 INFO L130 BoogieDeclarations]: Found specification of procedure KeSetEvent [2022-04-08 14:46:35,785 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2022-04-08 14:46:35,785 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Complete [2022-04-08 14:46:35,785 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_CreateClose [2022-04-08 14:46:35,785 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_DispatchPassThrough [2022-04-08 14:46:35,785 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Power [2022-04-08 14:46:35,786 INFO L130 BoogieDeclarations]: Found specification of procedure PoCallDriver [2022-04-08 14:46:35,786 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_InternIoCtl [2022-04-08 14:46:35,786 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2022-04-08 14:46:35,786 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2022-04-08 14:46:35,786 INFO L130 BoogieDeclarations]: Found specification of procedure stub_driver_init [2022-04-08 14:46:35,786 INFO L130 BoogieDeclarations]: Found specification of procedure _BLAST_init [2022-04-08 14:46:35,786 INFO L130 BoogieDeclarations]: Found specification of procedure main [2022-04-08 14:46:35,786 INFO L130 BoogieDeclarations]: Found specification of procedure stubMoreProcessingRequired [2022-04-08 14:46:35,786 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2022-04-08 14:46:35,786 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-04-08 14:46:35,786 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-04-08 14:46:35,787 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-04-08 14:46:35,787 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-04-08 14:46:35,787 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-04-08 14:46:35,929 INFO L234 CfgBuilder]: Building ICFG [2022-04-08 14:46:35,931 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-04-08 14:46:36,001 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-08 14:46:36,196 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##18: assume false; [2022-04-08 14:46:36,197 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##19: assume !false; [2022-04-08 14:46:36,201 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-08 14:46:36,247 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-08 14:46:36,247 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-08 14:46:36,397 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-08 14:46:36,417 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##16: assume !false; [2022-04-08 14:46:36,417 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##15: assume false; [2022-04-08 14:46:36,426 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-08 14:46:36,558 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##43: assume false; [2022-04-08 14:46:36,559 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##44: assume !false; [2022-04-08 14:46:36,566 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-08 14:46:36,610 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##10: assume !false; [2022-04-08 14:46:36,610 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##9: assume false; [2022-04-08 14:46:36,616 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-08 14:46:36,696 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-08 14:46:36,696 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-08 14:46:36,761 INFO L275 CfgBuilder]: Performing block encoding [2022-04-08 14:46:36,773 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-04-08 14:46:36,773 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-04-08 14:46:36,774 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.04 02:46:36 BoogieIcfgContainer [2022-04-08 14:46:36,775 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-04-08 14:46:36,778 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-04-08 14:46:36,778 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-04-08 14:46:36,781 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-04-08 14:46:36,781 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 08.04 02:46:35" (1/3) ... [2022-04-08 14:46:36,781 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@688f830b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.04 02:46:36, skipping insertion in model container [2022-04-08 14:46:36,782 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.04 02:46:35" (2/3) ... [2022-04-08 14:46:36,782 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@688f830b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.04 02:46:36, skipping insertion in model container [2022-04-08 14:46:36,782 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.04 02:46:36" (3/3) ... [2022-04-08 14:46:36,783 INFO L111 eAbstractionObserver]: Analyzing ICFG kbfiltr_simpl2.cil-2.c [2022-04-08 14:46:36,788 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:Craig_NestedInterpolation Determinization: PREDICATE_ABSTRACTION [2022-04-08 14:46:36,788 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-04-08 14:46:36,836 INFO L339 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-04-08 14:46:36,844 INFO L340 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=Craig_NestedInterpolation, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP [2022-04-08 14:46:36,844 INFO L341 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-04-08 14:46:36,881 INFO L276 IsEmpty]: Start isEmpty. Operand has 240 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 200 states have internal predecessors, (284), 39 states have call successors, (39), 17 states have call predecessors, (39), 17 states have return successors, (39), 37 states have call predecessors, (39), 39 states have call successors, (39) [2022-04-08 14:46:36,887 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-04-08 14:46:36,887 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:46:36,888 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:46:36,889 INFO L403 AbstractCegarLoop]: === Iteration 1 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:46:36,896 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:46:36,896 INFO L85 PathProgramCache]: Analyzing trace with hash -1235546278, now seen corresponding path program 1 times [2022-04-08 14:46:36,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:46:36,904 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [450196054] [2022-04-08 14:46:36,914 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:46:36,914 INFO L85 PathProgramCache]: Analyzing trace with hash -1235546278, now seen corresponding path program 2 times [2022-04-08 14:46:36,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:46:36,917 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1917221533] [2022-04-08 14:46:36,918 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:46:36,918 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:46:37,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:37,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:46:37,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:37,247 INFO L290 TraceCheckUtils]: 0: Hoare triple {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {243#true} is VALID [2022-04-08 14:46:37,248 INFO L290 TraceCheckUtils]: 1: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-08 14:46:37,248 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {243#true} {243#true} #783#return; {243#true} is VALID [2022-04-08 14:46:37,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:46:37,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:37,295 INFO L290 TraceCheckUtils]: 0: Hoare triple {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {243#true} is VALID [2022-04-08 14:46:37,295 INFO L290 TraceCheckUtils]: 1: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-08 14:46:37,296 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {243#true} {248#(= main_~status~1 0)} #715#return; {248#(= main_~status~1 0)} is VALID [2022-04-08 14:46:37,298 INFO L272 TraceCheckUtils]: 0: Hoare triple {243#true} call ULTIMATE.init(); {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:46:37,299 INFO L290 TraceCheckUtils]: 1: Hoare triple {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {243#true} is VALID [2022-04-08 14:46:37,299 INFO L290 TraceCheckUtils]: 2: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-08 14:46:37,299 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {243#true} {243#true} #783#return; {243#true} is VALID [2022-04-08 14:46:37,300 INFO L272 TraceCheckUtils]: 4: Hoare triple {243#true} call #t~ret81 := main(); {243#true} is VALID [2022-04-08 14:46:37,300 INFO L290 TraceCheckUtils]: 5: Hoare triple {243#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {248#(= main_~status~1 0)} is VALID [2022-04-08 14:46:37,302 INFO L272 TraceCheckUtils]: 6: Hoare triple {248#(= main_~status~1 0)} call _BLAST_init(); {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:37,302 INFO L290 TraceCheckUtils]: 7: Hoare triple {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {243#true} is VALID [2022-04-08 14:46:37,302 INFO L290 TraceCheckUtils]: 8: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-08 14:46:37,303 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {243#true} {248#(= main_~status~1 0)} #715#return; {248#(= main_~status~1 0)} is VALID [2022-04-08 14:46:37,304 INFO L290 TraceCheckUtils]: 10: Hoare triple {248#(= main_~status~1 0)} assume !(~status~1 >= 0); {244#false} is VALID [2022-04-08 14:46:37,304 INFO L290 TraceCheckUtils]: 11: Hoare triple {244#false} assume !(1 == ~pended~0); {244#false} is VALID [2022-04-08 14:46:37,304 INFO L290 TraceCheckUtils]: 12: Hoare triple {244#false} assume !(1 == ~pended~0); {244#false} is VALID [2022-04-08 14:46:37,304 INFO L290 TraceCheckUtils]: 13: Hoare triple {244#false} assume ~s~0 != ~UNLOADED~0; {244#false} is VALID [2022-04-08 14:46:37,305 INFO L290 TraceCheckUtils]: 14: Hoare triple {244#false} assume -1 != ~status~1; {244#false} is VALID [2022-04-08 14:46:37,305 INFO L290 TraceCheckUtils]: 15: Hoare triple {244#false} assume !(~s~0 != ~SKIP2~0); {244#false} is VALID [2022-04-08 14:46:37,305 INFO L290 TraceCheckUtils]: 16: Hoare triple {244#false} assume 1 == ~pended~0; {244#false} is VALID [2022-04-08 14:46:37,305 INFO L290 TraceCheckUtils]: 17: Hoare triple {244#false} assume 259 != ~status~1; {244#false} is VALID [2022-04-08 14:46:37,305 INFO L272 TraceCheckUtils]: 18: Hoare triple {244#false} call errorFn(); {244#false} is VALID [2022-04-08 14:46:37,306 INFO L290 TraceCheckUtils]: 19: Hoare triple {244#false} assume !false; {244#false} is VALID [2022-04-08 14:46:37,306 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:46:37,307 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:46:37,307 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1917221533] [2022-04-08 14:46:37,308 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1917221533] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:46:37,308 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:46:37,308 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-08 14:46:37,310 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:46:37,310 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [450196054] [2022-04-08 14:46:37,311 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [450196054] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:46:37,311 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:46:37,311 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-08 14:46:37,311 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [782517983] [2022-04-08 14:46:37,312 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:46:37,316 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-08 14:46:37,317 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:46:37,320 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-08 14:46:37,343 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:37,343 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-04-08 14:46:37,343 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:46:37,365 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-04-08 14:46:37,366 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-08 14:46:37,372 INFO L87 Difference]: Start difference. First operand has 240 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 200 states have internal predecessors, (284), 39 states have call successors, (39), 17 states have call predecessors, (39), 17 states have return successors, (39), 37 states have call predecessors, (39), 39 states have call successors, (39) Second operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-08 14:46:39,303 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:39,304 INFO L93 Difference]: Finished difference Result 417 states and 628 transitions. [2022-04-08 14:46:39,304 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-04-08 14:46:39,305 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-08 14:46:39,305 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:46:39,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-08 14:46:39,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 628 transitions. [2022-04-08 14:46:39,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-08 14:46:39,360 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 628 transitions. [2022-04-08 14:46:39,361 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 5 states and 628 transitions. [2022-04-08 14:46:39,972 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 628 edges. 628 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:39,998 INFO L225 Difference]: With dead ends: 417 [2022-04-08 14:46:39,999 INFO L226 Difference]: Without dead ends: 259 [2022-04-08 14:46:40,003 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-08 14:46:40,005 INFO L913 BasicCegarLoop]: 297 mSDtfsCounter, 328 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 410 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 334 SdHoareTripleChecker+Valid, 444 SdHoareTripleChecker+Invalid, 491 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 410 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-04-08 14:46:40,006 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [334 Valid, 444 Invalid, 491 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 410 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-04-08 14:46:40,021 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-04-08 14:46:40,063 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 231. [2022-04-08 14:46:40,063 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:46:40,065 INFO L82 GeneralOperation]: Start isEquivalent. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-08 14:46:40,066 INFO L74 IsIncluded]: Start isIncluded. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-08 14:46:40,067 INFO L87 Difference]: Start difference. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-08 14:46:40,080 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:40,081 INFO L93 Difference]: Finished difference Result 259 states and 367 transitions. [2022-04-08 14:46:40,081 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 367 transitions. [2022-04-08 14:46:40,084 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:46:40,084 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:46:40,085 INFO L74 IsIncluded]: Start isIncluded. First operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 259 states. [2022-04-08 14:46:40,086 INFO L87 Difference]: Start difference. First operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 259 states. [2022-04-08 14:46:40,098 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:40,098 INFO L93 Difference]: Finished difference Result 259 states and 367 transitions. [2022-04-08 14:46:40,098 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 367 transitions. [2022-04-08 14:46:40,100 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:46:40,100 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:46:40,100 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:46:40,101 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:46:40,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-08 14:46:40,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 326 transitions. [2022-04-08 14:46:40,114 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 326 transitions. Word has length 20 [2022-04-08 14:46:40,114 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:46:40,114 INFO L478 AbstractCegarLoop]: Abstraction has 231 states and 326 transitions. [2022-04-08 14:46:40,115 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-08 14:46:40,115 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 231 states and 326 transitions. [2022-04-08 14:46:40,481 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 326 edges. 326 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:40,481 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 326 transitions. [2022-04-08 14:46:40,482 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-08 14:46:40,482 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:46:40,482 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:46:40,483 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-04-08 14:46:40,483 INFO L403 AbstractCegarLoop]: === Iteration 2 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:46:40,483 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:46:40,483 INFO L85 PathProgramCache]: Analyzing trace with hash -225403307, now seen corresponding path program 1 times [2022-04-08 14:46:40,483 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:46:40,484 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [272852555] [2022-04-08 14:46:40,484 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:46:40,484 INFO L85 PathProgramCache]: Analyzing trace with hash -225403307, now seen corresponding path program 2 times [2022-04-08 14:46:40,484 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:46:40,485 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1376513002] [2022-04-08 14:46:40,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:46:40,485 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:46:40,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:40,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:46:40,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:40,590 INFO L290 TraceCheckUtils]: 0: Hoare triple {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-08 14:46:40,590 INFO L290 TraceCheckUtils]: 1: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-08 14:46:40,590 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2070#true} {2070#true} #783#return; {2070#true} is VALID [2022-04-08 14:46:40,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:46:40,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:40,623 INFO L290 TraceCheckUtils]: 0: Hoare triple {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2070#true} is VALID [2022-04-08 14:46:40,624 INFO L290 TraceCheckUtils]: 1: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-08 14:46:40,624 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2070#true} {2070#true} #715#return; {2070#true} is VALID [2022-04-08 14:46:40,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:46:40,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:40,643 INFO L290 TraceCheckUtils]: 0: Hoare triple {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,643 INFO L290 TraceCheckUtils]: 1: Hoare triple {2081#(= ~s~0 ~NP~0)} assume true; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,644 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2081#(= ~s~0 ~NP~0)} {2070#true} #717#return; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,645 INFO L272 TraceCheckUtils]: 0: Hoare triple {2070#true} call ULTIMATE.init(); {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:46:40,646 INFO L290 TraceCheckUtils]: 1: Hoare triple {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-08 14:46:40,646 INFO L290 TraceCheckUtils]: 2: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-08 14:46:40,646 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {2070#true} {2070#true} #783#return; {2070#true} is VALID [2022-04-08 14:46:40,646 INFO L272 TraceCheckUtils]: 4: Hoare triple {2070#true} call #t~ret81 := main(); {2070#true} is VALID [2022-04-08 14:46:40,646 INFO L290 TraceCheckUtils]: 5: Hoare triple {2070#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {2070#true} is VALID [2022-04-08 14:46:40,648 INFO L272 TraceCheckUtils]: 6: Hoare triple {2070#true} call _BLAST_init(); {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:40,648 INFO L290 TraceCheckUtils]: 7: Hoare triple {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2070#true} is VALID [2022-04-08 14:46:40,648 INFO L290 TraceCheckUtils]: 8: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-08 14:46:40,648 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {2070#true} {2070#true} #715#return; {2070#true} is VALID [2022-04-08 14:46:40,649 INFO L290 TraceCheckUtils]: 10: Hoare triple {2070#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-08 14:46:40,649 INFO L290 TraceCheckUtils]: 11: Hoare triple {2070#true} assume !(0 == ~irp_choice~0); {2070#true} is VALID [2022-04-08 14:46:40,650 INFO L272 TraceCheckUtils]: 12: Hoare triple {2070#true} call stub_driver_init(); {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:40,650 INFO L290 TraceCheckUtils]: 13: Hoare triple {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,653 INFO L290 TraceCheckUtils]: 14: Hoare triple {2081#(= ~s~0 ~NP~0)} assume true; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,653 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {2081#(= ~s~0 ~NP~0)} {2070#true} #717#return; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,655 INFO L290 TraceCheckUtils]: 16: Hoare triple {2081#(= ~s~0 ~NP~0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,655 INFO L290 TraceCheckUtils]: 17: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~tmp_ndt_1~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,656 INFO L272 TraceCheckUtils]: 18: Hoare triple {2081#(= ~s~0 ~NP~0)} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,656 INFO L290 TraceCheckUtils]: 19: Hoare triple {2081#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,657 INFO L290 TraceCheckUtils]: 20: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~irpStack__MajorFunction~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,658 INFO L290 TraceCheckUtils]: 21: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,659 INFO L290 TraceCheckUtils]: 22: Hoare triple {2081#(= ~s~0 ~NP~0)} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,659 INFO L272 TraceCheckUtils]: 23: Hoare triple {2081#(= ~s~0 ~NP~0)} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,660 INFO L290 TraceCheckUtils]: 24: Hoare triple {2081#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-08 14:46:40,660 INFO L290 TraceCheckUtils]: 25: Hoare triple {2081#(= ~s~0 ~NP~0)} assume !(~s~0 == ~NP~0); {2071#false} is VALID [2022-04-08 14:46:40,660 INFO L272 TraceCheckUtils]: 26: Hoare triple {2071#false} call errorFn(); {2071#false} is VALID [2022-04-08 14:46:40,661 INFO L290 TraceCheckUtils]: 27: Hoare triple {2071#false} assume !false; {2071#false} is VALID [2022-04-08 14:46:40,661 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:46:40,661 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:46:40,662 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1376513002] [2022-04-08 14:46:40,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1376513002] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:46:40,662 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:46:40,662 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-08 14:46:40,662 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:46:40,663 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [272852555] [2022-04-08 14:46:40,663 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [272852555] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:46:40,663 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:46:40,663 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-08 14:46:40,663 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1832971297] [2022-04-08 14:46:40,663 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:46:40,664 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-08 14:46:40,665 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:46:40,665 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:40,689 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:40,689 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-08 14:46:40,689 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:46:40,690 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-08 14:46:40,690 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-08 14:46:40,690 INFO L87 Difference]: Start difference. First operand 231 states and 326 transitions. Second operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:42,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:42,388 INFO L93 Difference]: Finished difference Result 410 states and 565 transitions. [2022-04-08 14:46:42,388 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-08 14:46:42,388 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-08 14:46:42,389 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:46:42,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:42,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 565 transitions. [2022-04-08 14:46:42,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:42,405 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 565 transitions. [2022-04-08 14:46:42,405 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 565 transitions. [2022-04-08 14:46:43,000 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 565 edges. 565 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:43,015 INFO L225 Difference]: With dead ends: 410 [2022-04-08 14:46:43,015 INFO L226 Difference]: Without dead ends: 349 [2022-04-08 14:46:43,015 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-08 14:46:43,016 INFO L913 BasicCegarLoop]: 359 mSDtfsCounter, 537 mSDsluCounter, 114 mSDsCounter, 0 mSdLazyCounter, 376 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 537 SdHoareTripleChecker+Valid, 473 SdHoareTripleChecker+Invalid, 472 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 376 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-08 14:46:43,017 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [537 Valid, 473 Invalid, 472 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 376 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-08 14:46:43,018 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 349 states. [2022-04-08 14:46:43,052 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 349 to 304. [2022-04-08 14:46:43,052 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:46:43,054 INFO L82 GeneralOperation]: Start isEquivalent. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-08 14:46:43,055 INFO L74 IsIncluded]: Start isIncluded. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-08 14:46:43,056 INFO L87 Difference]: Start difference. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-08 14:46:43,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:43,072 INFO L93 Difference]: Finished difference Result 349 states and 477 transitions. [2022-04-08 14:46:43,072 INFO L276 IsEmpty]: Start isEmpty. Operand 349 states and 477 transitions. [2022-04-08 14:46:43,073 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:46:43,073 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:46:43,074 INFO L74 IsIncluded]: Start isIncluded. First operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 349 states. [2022-04-08 14:46:43,075 INFO L87 Difference]: Start difference. First operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 349 states. [2022-04-08 14:46:43,089 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:43,089 INFO L93 Difference]: Finished difference Result 349 states and 477 transitions. [2022-04-08 14:46:43,089 INFO L276 IsEmpty]: Start isEmpty. Operand 349 states and 477 transitions. [2022-04-08 14:46:43,090 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:46:43,090 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:46:43,090 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:46:43,090 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:46:43,091 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-08 14:46:43,104 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 415 transitions. [2022-04-08 14:46:43,105 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 415 transitions. Word has length 28 [2022-04-08 14:46:43,105 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:46:43,105 INFO L478 AbstractCegarLoop]: Abstraction has 304 states and 415 transitions. [2022-04-08 14:46:43,105 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:43,105 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 304 states and 415 transitions. [2022-04-08 14:46:43,556 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 415 edges. 415 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:43,556 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 415 transitions. [2022-04-08 14:46:43,557 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-08 14:46:43,557 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:46:43,557 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:46:43,557 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-04-08 14:46:43,557 INFO L403 AbstractCegarLoop]: === Iteration 3 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:46:43,558 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:46:43,558 INFO L85 PathProgramCache]: Analyzing trace with hash -809602478, now seen corresponding path program 1 times [2022-04-08 14:46:43,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:46:43,558 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1093286156] [2022-04-08 14:46:43,558 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:46:43,559 INFO L85 PathProgramCache]: Analyzing trace with hash -809602478, now seen corresponding path program 2 times [2022-04-08 14:46:43,559 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:46:43,559 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [81608258] [2022-04-08 14:46:43,559 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:46:43,559 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:46:43,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:43,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:46:43,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:43,703 INFO L290 TraceCheckUtils]: 0: Hoare triple {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-08 14:46:43,703 INFO L290 TraceCheckUtils]: 1: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-08 14:46:43,704 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4218#true} {4218#true} #783#return; {4218#true} is VALID [2022-04-08 14:46:43,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:46:43,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:43,734 INFO L290 TraceCheckUtils]: 0: Hoare triple {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4218#true} is VALID [2022-04-08 14:46:43,735 INFO L290 TraceCheckUtils]: 1: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-08 14:46:43,735 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4218#true} {4218#true} #715#return; {4218#true} is VALID [2022-04-08 14:46:43,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:46:43,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:43,753 INFO L290 TraceCheckUtils]: 0: Hoare triple {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,754 INFO L290 TraceCheckUtils]: 1: Hoare triple {4229#(= ~compRegistered~0 0)} assume true; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,754 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4229#(= ~compRegistered~0 0)} {4218#true} #717#return; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,756 INFO L272 TraceCheckUtils]: 0: Hoare triple {4218#true} call ULTIMATE.init(); {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:46:43,756 INFO L290 TraceCheckUtils]: 1: Hoare triple {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-08 14:46:43,756 INFO L290 TraceCheckUtils]: 2: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-08 14:46:43,756 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {4218#true} {4218#true} #783#return; {4218#true} is VALID [2022-04-08 14:46:43,756 INFO L272 TraceCheckUtils]: 4: Hoare triple {4218#true} call #t~ret81 := main(); {4218#true} is VALID [2022-04-08 14:46:43,757 INFO L290 TraceCheckUtils]: 5: Hoare triple {4218#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {4218#true} is VALID [2022-04-08 14:46:43,758 INFO L272 TraceCheckUtils]: 6: Hoare triple {4218#true} call _BLAST_init(); {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:43,758 INFO L290 TraceCheckUtils]: 7: Hoare triple {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4218#true} is VALID [2022-04-08 14:46:43,758 INFO L290 TraceCheckUtils]: 8: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-08 14:46:43,758 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {4218#true} {4218#true} #715#return; {4218#true} is VALID [2022-04-08 14:46:43,759 INFO L290 TraceCheckUtils]: 10: Hoare triple {4218#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-08 14:46:43,759 INFO L290 TraceCheckUtils]: 11: Hoare triple {4218#true} assume !(0 == ~irp_choice~0); {4218#true} is VALID [2022-04-08 14:46:43,759 INFO L272 TraceCheckUtils]: 12: Hoare triple {4218#true} call stub_driver_init(); {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:43,760 INFO L290 TraceCheckUtils]: 13: Hoare triple {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,760 INFO L290 TraceCheckUtils]: 14: Hoare triple {4229#(= ~compRegistered~0 0)} assume true; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,761 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {4229#(= ~compRegistered~0 0)} {4218#true} #717#return; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,761 INFO L290 TraceCheckUtils]: 16: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,762 INFO L290 TraceCheckUtils]: 17: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,767 INFO L290 TraceCheckUtils]: 18: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,767 INFO L290 TraceCheckUtils]: 19: Hoare triple {4229#(= ~compRegistered~0 0)} assume 3 == ~tmp_ndt_3~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,768 INFO L272 TraceCheckUtils]: 20: Hoare triple {4229#(= ~compRegistered~0 0)} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,769 INFO L290 TraceCheckUtils]: 21: Hoare triple {4229#(= ~compRegistered~0 0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,769 INFO L290 TraceCheckUtils]: 22: Hoare triple {4229#(= ~compRegistered~0 0)} assume 0 == ~irpStack__MinorFunction~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,770 INFO L290 TraceCheckUtils]: 23: Hoare triple {4229#(= ~compRegistered~0 0)} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,770 INFO L290 TraceCheckUtils]: 24: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(~s~0 != ~NP~0); {4229#(= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:43,770 INFO L290 TraceCheckUtils]: 25: Hoare triple {4229#(= ~compRegistered~0 0)} assume 0 != ~compRegistered~0; {4219#false} is VALID [2022-04-08 14:46:43,771 INFO L272 TraceCheckUtils]: 26: Hoare triple {4219#false} call errorFn(); {4219#false} is VALID [2022-04-08 14:46:43,771 INFO L290 TraceCheckUtils]: 27: Hoare triple {4219#false} assume !false; {4219#false} is VALID [2022-04-08 14:46:43,772 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:46:43,772 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:46:43,773 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [81608258] [2022-04-08 14:46:43,773 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [81608258] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:46:43,773 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:46:43,773 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-08 14:46:43,773 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:46:43,774 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1093286156] [2022-04-08 14:46:43,774 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1093286156] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:46:43,774 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:46:43,774 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-08 14:46:43,774 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1289361249] [2022-04-08 14:46:43,774 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:46:43,775 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-08 14:46:43,775 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:46:43,775 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:43,798 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:43,798 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-08 14:46:43,798 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:46:43,798 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-08 14:46:43,798 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-08 14:46:43,799 INFO L87 Difference]: Start difference. First operand 304 states and 415 transitions. Second operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:45,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:45,374 INFO L93 Difference]: Finished difference Result 487 states and 647 transitions. [2022-04-08 14:46:45,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-08 14:46:45,374 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-08 14:46:45,374 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:46:45,374 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:45,382 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 515 transitions. [2022-04-08 14:46:45,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:45,388 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 515 transitions. [2022-04-08 14:46:45,388 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 515 transitions. [2022-04-08 14:46:45,883 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 515 edges. 515 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:45,894 INFO L225 Difference]: With dead ends: 487 [2022-04-08 14:46:45,894 INFO L226 Difference]: Without dead ends: 368 [2022-04-08 14:46:45,895 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-08 14:46:45,896 INFO L913 BasicCegarLoop]: 267 mSDtfsCounter, 572 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 330 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 572 SdHoareTripleChecker+Valid, 386 SdHoareTripleChecker+Invalid, 431 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 330 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-08 14:46:45,896 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [572 Valid, 386 Invalid, 431 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 330 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-08 14:46:45,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 368 states. [2022-04-08 14:46:45,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 368 to 344. [2022-04-08 14:46:45,924 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:46:45,925 INFO L82 GeneralOperation]: Start isEquivalent. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 14:46:45,926 INFO L74 IsIncluded]: Start isIncluded. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 14:46:45,927 INFO L87 Difference]: Start difference. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 14:46:45,942 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:45,942 INFO L93 Difference]: Finished difference Result 368 states and 494 transitions. [2022-04-08 14:46:45,942 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 494 transitions. [2022-04-08 14:46:45,943 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:46:45,943 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:46:45,945 INFO L74 IsIncluded]: Start isIncluded. First operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 368 states. [2022-04-08 14:46:45,945 INFO L87 Difference]: Start difference. First operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 368 states. [2022-04-08 14:46:45,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:45,960 INFO L93 Difference]: Finished difference Result 368 states and 494 transitions. [2022-04-08 14:46:45,960 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 494 transitions. [2022-04-08 14:46:45,961 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:46:45,961 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:46:45,961 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:46:45,961 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:46:45,962 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 14:46:45,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 466 transitions. [2022-04-08 14:46:45,988 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 466 transitions. Word has length 28 [2022-04-08 14:46:45,988 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:46:45,989 INFO L478 AbstractCegarLoop]: Abstraction has 344 states and 466 transitions. [2022-04-08 14:46:45,989 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:45,989 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 344 states and 466 transitions. [2022-04-08 14:46:46,449 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 466 edges. 466 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:46,449 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 466 transitions. [2022-04-08 14:46:46,450 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-04-08 14:46:46,450 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:46:46,450 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:46:46,450 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-04-08 14:46:46,450 INFO L403 AbstractCegarLoop]: === Iteration 4 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:46:46,453 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:46:46,453 INFO L85 PathProgramCache]: Analyzing trace with hash -1415760533, now seen corresponding path program 1 times [2022-04-08 14:46:46,454 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:46:46,454 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1519815083] [2022-04-08 14:46:46,454 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:46:46,454 INFO L85 PathProgramCache]: Analyzing trace with hash -1415760533, now seen corresponding path program 2 times [2022-04-08 14:46:46,454 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:46:46,455 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1627991576] [2022-04-08 14:46:46,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:46:46,455 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:46:46,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:46,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:46:46,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:46,554 INFO L290 TraceCheckUtils]: 0: Hoare triple {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-08 14:46:46,554 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-08 14:46:46,554 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #783#return; {6638#true} is VALID [2022-04-08 14:46:46,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:46:46,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:46,584 INFO L290 TraceCheckUtils]: 0: Hoare triple {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-08 14:46:46,584 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-08 14:46:46,584 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #715#return; {6638#true} is VALID [2022-04-08 14:46:46,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:46:46,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:46,608 INFO L290 TraceCheckUtils]: 0: Hoare triple {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-08 14:46:46,608 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-08 14:46:46,609 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #717#return; {6638#true} is VALID [2022-04-08 14:46:46,610 INFO L272 TraceCheckUtils]: 0: Hoare triple {6638#true} call ULTIMATE.init(); {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:46:46,611 INFO L290 TraceCheckUtils]: 1: Hoare triple {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-08 14:46:46,611 INFO L290 TraceCheckUtils]: 2: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-08 14:46:46,611 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {6638#true} {6638#true} #783#return; {6638#true} is VALID [2022-04-08 14:46:46,611 INFO L272 TraceCheckUtils]: 4: Hoare triple {6638#true} call #t~ret81 := main(); {6638#true} is VALID [2022-04-08 14:46:46,611 INFO L290 TraceCheckUtils]: 5: Hoare triple {6638#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {6638#true} is VALID [2022-04-08 14:46:46,613 INFO L272 TraceCheckUtils]: 6: Hoare triple {6638#true} call _BLAST_init(); {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:46,613 INFO L290 TraceCheckUtils]: 7: Hoare triple {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-08 14:46:46,613 INFO L290 TraceCheckUtils]: 8: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-08 14:46:46,613 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {6638#true} {6638#true} #715#return; {6638#true} is VALID [2022-04-08 14:46:46,613 INFO L290 TraceCheckUtils]: 10: Hoare triple {6638#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-08 14:46:46,613 INFO L290 TraceCheckUtils]: 11: Hoare triple {6638#true} assume !(0 == ~irp_choice~0); {6638#true} is VALID [2022-04-08 14:46:46,614 INFO L272 TraceCheckUtils]: 12: Hoare triple {6638#true} call stub_driver_init(); {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:46,614 INFO L290 TraceCheckUtils]: 13: Hoare triple {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-08 14:46:46,615 INFO L290 TraceCheckUtils]: 14: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-08 14:46:46,615 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {6638#true} {6638#true} #717#return; {6638#true} is VALID [2022-04-08 14:46:46,615 INFO L290 TraceCheckUtils]: 16: Hoare triple {6638#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {6638#true} is VALID [2022-04-08 14:46:46,615 INFO L290 TraceCheckUtils]: 17: Hoare triple {6638#true} assume 0 == ~tmp_ndt_1~0; {6638#true} is VALID [2022-04-08 14:46:46,615 INFO L272 TraceCheckUtils]: 18: Hoare triple {6638#true} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {6638#true} is VALID [2022-04-08 14:46:46,615 INFO L290 TraceCheckUtils]: 19: Hoare triple {6638#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {6638#true} is VALID [2022-04-08 14:46:46,616 INFO L290 TraceCheckUtils]: 20: Hoare triple {6638#true} assume 0 == ~irpStack__MajorFunction~0; {6638#true} is VALID [2022-04-08 14:46:46,616 INFO L290 TraceCheckUtils]: 21: Hoare triple {6638#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {6638#true} is VALID [2022-04-08 14:46:46,616 INFO L290 TraceCheckUtils]: 22: Hoare triple {6638#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {6638#true} is VALID [2022-04-08 14:46:46,616 INFO L272 TraceCheckUtils]: 23: Hoare triple {6638#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {6638#true} is VALID [2022-04-08 14:46:46,616 INFO L290 TraceCheckUtils]: 24: Hoare triple {6638#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {6638#true} is VALID [2022-04-08 14:46:46,617 INFO L290 TraceCheckUtils]: 25: Hoare triple {6638#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:46:46,617 INFO L290 TraceCheckUtils]: 26: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:46:46,618 INFO L272 TraceCheckUtils]: 27: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:46:46,618 INFO L290 TraceCheckUtils]: 28: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:46:46,619 INFO L290 TraceCheckUtils]: 29: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(0 != ~compRegistered~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:46:46,619 INFO L290 TraceCheckUtils]: 30: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:46:46,620 INFO L290 TraceCheckUtils]: 31: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume 0 == ~tmp_ndt_6~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:46:46,620 INFO L290 TraceCheckUtils]: 32: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} ~returnVal2~0 := 0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:46:46,621 INFO L290 TraceCheckUtils]: 33: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~NP~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:46:46,621 INFO L290 TraceCheckUtils]: 34: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~MPR1~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:46:46,621 INFO L290 TraceCheckUtils]: 35: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~SKIP1~0); {6639#false} is VALID [2022-04-08 14:46:46,622 INFO L272 TraceCheckUtils]: 36: Hoare triple {6639#false} call errorFn(); {6639#false} is VALID [2022-04-08 14:46:46,622 INFO L290 TraceCheckUtils]: 37: Hoare triple {6639#false} assume !false; {6639#false} is VALID [2022-04-08 14:46:46,622 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:46:46,622 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:46:46,622 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1627991576] [2022-04-08 14:46:46,622 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1627991576] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:46:46,623 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:46:46,623 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-08 14:46:46,623 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:46:46,623 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1519815083] [2022-04-08 14:46:46,623 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1519815083] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:46:46,623 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:46:46,623 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-08 14:46:46,623 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1568508842] [2022-04-08 14:46:46,624 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:46:46,624 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-08 14:46:46,624 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:46:46,624 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:46,651 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 38 edges. 38 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:46,651 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-08 14:46:46,651 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:46:46,652 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-08 14:46:46,652 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-08 14:46:46,652 INFO L87 Difference]: Start difference. First operand 344 states and 466 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:48,203 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:48,203 INFO L93 Difference]: Finished difference Result 347 states and 468 transitions. [2022-04-08 14:46:48,204 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-08 14:46:48,204 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-08 14:46:48,204 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:46:48,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:48,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 338 transitions. [2022-04-08 14:46:48,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:48,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 338 transitions. [2022-04-08 14:46:48,212 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 338 transitions. [2022-04-08 14:46:48,559 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 338 edges. 338 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:48,570 INFO L225 Difference]: With dead ends: 347 [2022-04-08 14:46:48,571 INFO L226 Difference]: Without dead ends: 343 [2022-04-08 14:46:48,571 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-04-08 14:46:48,572 INFO L913 BasicCegarLoop]: 268 mSDtfsCounter, 187 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 593 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 421 SdHoareTripleChecker+Invalid, 628 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 593 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-04-08 14:46:48,572 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [187 Valid, 421 Invalid, 628 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 593 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-04-08 14:46:48,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-04-08 14:46:48,604 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2022-04-08 14:46:48,605 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:46:48,606 INFO L82 GeneralOperation]: Start isEquivalent. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 14:46:48,606 INFO L74 IsIncluded]: Start isIncluded. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 14:46:48,607 INFO L87 Difference]: Start difference. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 14:46:48,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:48,619 INFO L93 Difference]: Finished difference Result 343 states and 463 transitions. [2022-04-08 14:46:48,619 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-08 14:46:48,621 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:46:48,621 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:46:48,622 INFO L74 IsIncluded]: Start isIncluded. First operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 343 states. [2022-04-08 14:46:48,623 INFO L87 Difference]: Start difference. First operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 343 states. [2022-04-08 14:46:48,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:48,633 INFO L93 Difference]: Finished difference Result 343 states and 463 transitions. [2022-04-08 14:46:48,633 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-08 14:46:48,635 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:46:48,635 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:46:48,635 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:46:48,635 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:46:48,636 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-08 14:46:48,648 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 463 transitions. [2022-04-08 14:46:48,648 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 463 transitions. Word has length 38 [2022-04-08 14:46:48,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:46:48,649 INFO L478 AbstractCegarLoop]: Abstraction has 343 states and 463 transitions. [2022-04-08 14:46:48,649 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-08 14:46:48,649 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 343 states and 463 transitions. [2022-04-08 14:46:49,136 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 463 edges. 463 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:49,136 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-08 14:46:49,137 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-08 14:46:49,137 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:46:49,138 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:46:49,138 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-04-08 14:46:49,138 INFO L403 AbstractCegarLoop]: === Iteration 5 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:46:49,138 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:46:49,138 INFO L85 PathProgramCache]: Analyzing trace with hash 605107567, now seen corresponding path program 1 times [2022-04-08 14:46:49,138 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:46:49,139 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [2108679302] [2022-04-08 14:46:49,139 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:46:49,143 INFO L85 PathProgramCache]: Analyzing trace with hash 605107567, now seen corresponding path program 2 times [2022-04-08 14:46:49,143 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:46:49,143 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [681714622] [2022-04-08 14:46:49,143 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:46:49,143 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:46:49,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:49,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:46:49,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:49,260 INFO L290 TraceCheckUtils]: 0: Hoare triple {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-08 14:46:49,260 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-08 14:46:49,260 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #783#return; {8724#true} is VALID [2022-04-08 14:46:49,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:46:49,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:49,285 INFO L290 TraceCheckUtils]: 0: Hoare triple {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-08 14:46:49,285 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-08 14:46:49,285 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #715#return; {8724#true} is VALID [2022-04-08 14:46:49,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:46:49,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:49,299 INFO L290 TraceCheckUtils]: 0: Hoare triple {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-08 14:46:49,300 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-08 14:46:49,300 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #717#return; {8724#true} is VALID [2022-04-08 14:46:49,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-08 14:46:49,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:49,332 INFO L290 TraceCheckUtils]: 0: Hoare triple {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {8724#true} is VALID [2022-04-08 14:46:49,332 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume !(0 != ~compRegistered~0); {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:49,332 INFO L290 TraceCheckUtils]: 2: Hoare triple {8749#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:49,333 INFO L290 TraceCheckUtils]: 3: Hoare triple {8749#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:49,333 INFO L290 TraceCheckUtils]: 4: Hoare triple {8749#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:49,334 INFO L290 TraceCheckUtils]: 5: Hoare triple {8749#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:49,334 INFO L290 TraceCheckUtils]: 6: Hoare triple {8749#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:49,334 INFO L290 TraceCheckUtils]: 7: Hoare triple {8749#(<= ~compRegistered~0 0)} assume true; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:49,337 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {8749#(<= ~compRegistered~0 0)} {8735#(= ~compRegistered~0 1)} #755#return; {8725#false} is VALID [2022-04-08 14:46:49,338 INFO L272 TraceCheckUtils]: 0: Hoare triple {8724#true} call ULTIMATE.init(); {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:46:49,339 INFO L290 TraceCheckUtils]: 1: Hoare triple {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-08 14:46:49,339 INFO L290 TraceCheckUtils]: 2: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-08 14:46:49,339 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {8724#true} {8724#true} #783#return; {8724#true} is VALID [2022-04-08 14:46:49,339 INFO L272 TraceCheckUtils]: 4: Hoare triple {8724#true} call #t~ret81 := main(); {8724#true} is VALID [2022-04-08 14:46:49,339 INFO L290 TraceCheckUtils]: 5: Hoare triple {8724#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {8724#true} is VALID [2022-04-08 14:46:49,351 INFO L272 TraceCheckUtils]: 6: Hoare triple {8724#true} call _BLAST_init(); {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:49,352 INFO L290 TraceCheckUtils]: 7: Hoare triple {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-08 14:46:49,352 INFO L290 TraceCheckUtils]: 8: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-08 14:46:49,352 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {8724#true} {8724#true} #715#return; {8724#true} is VALID [2022-04-08 14:46:49,352 INFO L290 TraceCheckUtils]: 10: Hoare triple {8724#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-08 14:46:49,352 INFO L290 TraceCheckUtils]: 11: Hoare triple {8724#true} assume !(0 == ~irp_choice~0); {8724#true} is VALID [2022-04-08 14:46:49,354 INFO L272 TraceCheckUtils]: 12: Hoare triple {8724#true} call stub_driver_init(); {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:49,354 INFO L290 TraceCheckUtils]: 13: Hoare triple {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-08 14:46:49,354 INFO L290 TraceCheckUtils]: 14: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-08 14:46:49,354 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {8724#true} {8724#true} #717#return; {8724#true} is VALID [2022-04-08 14:46:49,354 INFO L290 TraceCheckUtils]: 16: Hoare triple {8724#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {8724#true} is VALID [2022-04-08 14:46:49,355 INFO L290 TraceCheckUtils]: 17: Hoare triple {8724#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {8724#true} is VALID [2022-04-08 14:46:49,355 INFO L290 TraceCheckUtils]: 18: Hoare triple {8724#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {8724#true} is VALID [2022-04-08 14:46:49,355 INFO L290 TraceCheckUtils]: 19: Hoare triple {8724#true} assume 3 == ~tmp_ndt_3~0; {8724#true} is VALID [2022-04-08 14:46:49,355 INFO L272 TraceCheckUtils]: 20: Hoare triple {8724#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {8724#true} is VALID [2022-04-08 14:46:49,355 INFO L290 TraceCheckUtils]: 21: Hoare triple {8724#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {8724#true} is VALID [2022-04-08 14:46:49,355 INFO L290 TraceCheckUtils]: 22: Hoare triple {8724#true} assume 0 == ~irpStack__MinorFunction~0; {8724#true} is VALID [2022-04-08 14:46:49,355 INFO L290 TraceCheckUtils]: 23: Hoare triple {8724#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {8724#true} is VALID [2022-04-08 14:46:49,356 INFO L290 TraceCheckUtils]: 24: Hoare triple {8724#true} assume !(~s~0 != ~NP~0); {8724#true} is VALID [2022-04-08 14:46:49,361 INFO L290 TraceCheckUtils]: 25: Hoare triple {8724#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {8735#(= ~compRegistered~0 1)} is VALID [2022-04-08 14:46:49,362 INFO L290 TraceCheckUtils]: 26: Hoare triple {8735#(= ~compRegistered~0 1)} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {8735#(= ~compRegistered~0 1)} is VALID [2022-04-08 14:46:49,362 INFO L272 TraceCheckUtils]: 27: Hoare triple {8735#(= ~compRegistered~0 1)} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:49,363 INFO L290 TraceCheckUtils]: 28: Hoare triple {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {8724#true} is VALID [2022-04-08 14:46:49,363 INFO L290 TraceCheckUtils]: 29: Hoare triple {8724#true} assume !(0 != ~compRegistered~0); {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:49,363 INFO L290 TraceCheckUtils]: 30: Hoare triple {8749#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:49,364 INFO L290 TraceCheckUtils]: 31: Hoare triple {8749#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:49,364 INFO L290 TraceCheckUtils]: 32: Hoare triple {8749#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:49,364 INFO L290 TraceCheckUtils]: 33: Hoare triple {8749#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:49,365 INFO L290 TraceCheckUtils]: 34: Hoare triple {8749#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:49,365 INFO L290 TraceCheckUtils]: 35: Hoare triple {8749#(<= ~compRegistered~0 0)} assume true; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-08 14:46:49,366 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {8749#(<= ~compRegistered~0 0)} {8735#(= ~compRegistered~0 1)} #755#return; {8725#false} is VALID [2022-04-08 14:46:49,366 INFO L290 TraceCheckUtils]: 37: Hoare triple {8725#false} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {8725#false} is VALID [2022-04-08 14:46:49,366 INFO L290 TraceCheckUtils]: 38: Hoare triple {8725#false} assume 259 == ~__cil_tmp23~0; {8725#false} is VALID [2022-04-08 14:46:49,366 INFO L272 TraceCheckUtils]: 39: Hoare triple {8725#false} call #t~ret11 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {8725#false} is VALID [2022-04-08 14:46:49,366 INFO L290 TraceCheckUtils]: 40: Hoare triple {8725#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {8725#false} is VALID [2022-04-08 14:46:49,367 INFO L290 TraceCheckUtils]: 41: Hoare triple {8725#false} assume !(~s~0 == ~MPR3~0); {8725#false} is VALID [2022-04-08 14:46:49,367 INFO L290 TraceCheckUtils]: 42: Hoare triple {8725#false} assume !(1 == ~customIrp~0); {8725#false} is VALID [2022-04-08 14:46:49,367 INFO L290 TraceCheckUtils]: 43: Hoare triple {8725#false} assume ~s~0 == ~MPR3~0; {8725#false} is VALID [2022-04-08 14:46:49,367 INFO L272 TraceCheckUtils]: 44: Hoare triple {8725#false} call errorFn(); {8725#false} is VALID [2022-04-08 14:46:49,367 INFO L290 TraceCheckUtils]: 45: Hoare triple {8725#false} assume !false; {8725#false} is VALID [2022-04-08 14:46:49,367 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:46:49,368 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:46:49,368 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [681714622] [2022-04-08 14:46:49,368 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [681714622] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:46:49,368 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:46:49,368 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 14:46:49,368 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:46:49,368 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [2108679302] [2022-04-08 14:46:49,368 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [2108679302] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:46:49,369 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:46:49,369 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 14:46:49,369 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2097165689] [2022-04-08 14:46:49,369 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:46:49,369 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-08 14:46:49,370 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:46:49,370 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-08 14:46:49,402 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:49,403 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-08 14:46:49,403 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:46:49,403 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-08 14:46:49,403 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-04-08 14:46:49,404 INFO L87 Difference]: Start difference. First operand 343 states and 463 transitions. Second operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-08 14:46:50,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:50,848 INFO L93 Difference]: Finished difference Result 394 states and 520 transitions. [2022-04-08 14:46:50,848 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-08 14:46:50,848 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-08 14:46:50,848 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:46:50,848 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-08 14:46:50,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 425 transitions. [2022-04-08 14:46:50,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-08 14:46:50,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 425 transitions. [2022-04-08 14:46:50,857 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 425 transitions. [2022-04-08 14:46:51,228 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 425 edges. 425 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:51,238 INFO L225 Difference]: With dead ends: 394 [2022-04-08 14:46:51,238 INFO L226 Difference]: Without dead ends: 325 [2022-04-08 14:46:51,238 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-04-08 14:46:51,239 INFO L913 BasicCegarLoop]: 306 mSDtfsCounter, 607 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 351 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 607 SdHoareTripleChecker+Valid, 534 SdHoareTripleChecker+Invalid, 443 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 351 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-08 14:46:51,239 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [607 Valid, 534 Invalid, 443 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 351 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-08 14:46:51,240 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-08 14:46:51,355 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 304. [2022-04-08 14:46:51,355 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:46:51,356 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-08 14:46:51,357 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-08 14:46:51,357 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-08 14:46:51,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:51,366 INFO L93 Difference]: Finished difference Result 325 states and 431 transitions. [2022-04-08 14:46:51,367 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 431 transitions. [2022-04-08 14:46:51,367 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:46:51,367 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:46:51,369 INFO L74 IsIncluded]: Start isIncluded. First operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 325 states. [2022-04-08 14:46:51,369 INFO L87 Difference]: Start difference. First operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 325 states. [2022-04-08 14:46:51,379 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:51,379 INFO L93 Difference]: Finished difference Result 325 states and 431 transitions. [2022-04-08 14:46:51,379 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 431 transitions. [2022-04-08 14:46:51,380 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:46:51,380 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:46:51,380 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:46:51,381 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:46:51,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-08 14:46:51,391 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 406 transitions. [2022-04-08 14:46:51,391 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 406 transitions. Word has length 46 [2022-04-08 14:46:51,392 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:46:51,392 INFO L478 AbstractCegarLoop]: Abstraction has 304 states and 406 transitions. [2022-04-08 14:46:51,392 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-08 14:46:51,392 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 304 states and 406 transitions. [2022-04-08 14:46:51,889 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 406 edges. 406 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:51,889 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 406 transitions. [2022-04-08 14:46:51,890 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-04-08 14:46:51,890 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:46:51,890 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:46:51,890 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-04-08 14:46:51,890 INFO L403 AbstractCegarLoop]: === Iteration 6 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:46:51,891 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:46:51,891 INFO L85 PathProgramCache]: Analyzing trace with hash -447308474, now seen corresponding path program 1 times [2022-04-08 14:46:51,891 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:46:51,891 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1344266245] [2022-04-08 14:46:51,891 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:46:51,891 INFO L85 PathProgramCache]: Analyzing trace with hash -447308474, now seen corresponding path program 2 times [2022-04-08 14:46:51,891 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:46:51,892 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1624870570] [2022-04-08 14:46:51,892 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:46:51,892 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:46:51,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:52,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:46:52,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:52,015 INFO L290 TraceCheckUtils]: 0: Hoare triple {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {10808#true} is VALID [2022-04-08 14:46:52,015 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-08 14:46:52,015 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10808#true} {10808#true} #783#return; {10808#true} is VALID [2022-04-08 14:46:52,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:46:52,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:52,063 INFO L290 TraceCheckUtils]: 0: Hoare triple {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-08 14:46:52,063 INFO L290 TraceCheckUtils]: 1: Hoare triple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-08 14:46:52,064 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {10808#true} #715#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 14:46:52,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:46:52,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:52,081 INFO L290 TraceCheckUtils]: 0: Hoare triple {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10808#true} is VALID [2022-04-08 14:46:52,081 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-08 14:46:52,081 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10808#true} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #717#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 14:46:52,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-08 14:46:52,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:52,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-08 14:46:52,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:52,170 INFO L290 TraceCheckUtils]: 0: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-08 14:46:52,171 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 14:46:52,171 INFO L290 TraceCheckUtils]: 2: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 14:46:52,175 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 14:46:52,176 INFO L290 TraceCheckUtils]: 0: Hoare triple {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {10808#true} is VALID [2022-04-08 14:46:52,176 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {10808#true} is VALID [2022-04-08 14:46:52,176 INFO L290 TraceCheckUtils]: 2: Hoare triple {10808#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {10808#true} is VALID [2022-04-08 14:46:52,177 INFO L290 TraceCheckUtils]: 3: Hoare triple {10808#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {10808#true} is VALID [2022-04-08 14:46:52,177 INFO L272 TraceCheckUtils]: 4: Hoare triple {10808#true} call IofCompleteRequest(~Irp, 0); {10843#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:46:52,177 INFO L290 TraceCheckUtils]: 5: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-08 14:46:52,178 INFO L290 TraceCheckUtils]: 6: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 14:46:52,178 INFO L290 TraceCheckUtils]: 7: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 14:46:52,179 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 14:46:52,180 INFO L290 TraceCheckUtils]: 9: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 14:46:52,180 INFO L290 TraceCheckUtils]: 10: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 14:46:52,181 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #727#return; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-08 14:46:52,183 INFO L272 TraceCheckUtils]: 0: Hoare triple {10808#true} call ULTIMATE.init(); {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:46:52,183 INFO L290 TraceCheckUtils]: 1: Hoare triple {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {10808#true} is VALID [2022-04-08 14:46:52,183 INFO L290 TraceCheckUtils]: 2: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-08 14:46:52,184 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10808#true} {10808#true} #783#return; {10808#true} is VALID [2022-04-08 14:46:52,184 INFO L272 TraceCheckUtils]: 4: Hoare triple {10808#true} call #t~ret81 := main(); {10808#true} is VALID [2022-04-08 14:46:52,184 INFO L290 TraceCheckUtils]: 5: Hoare triple {10808#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {10808#true} is VALID [2022-04-08 14:46:52,185 INFO L272 TraceCheckUtils]: 6: Hoare triple {10808#true} call _BLAST_init(); {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:52,191 INFO L290 TraceCheckUtils]: 7: Hoare triple {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-08 14:46:52,192 INFO L290 TraceCheckUtils]: 8: Hoare triple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-08 14:46:52,193 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {10808#true} #715#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 14:46:52,194 INFO L290 TraceCheckUtils]: 10: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 14:46:52,195 INFO L290 TraceCheckUtils]: 11: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~irp_choice~0); {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 14:46:52,196 INFO L272 TraceCheckUtils]: 12: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call stub_driver_init(); {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:52,196 INFO L290 TraceCheckUtils]: 13: Hoare triple {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10808#true} is VALID [2022-04-08 14:46:52,196 INFO L290 TraceCheckUtils]: 14: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-08 14:46:52,199 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {10808#true} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #717#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 14:46:52,199 INFO L290 TraceCheckUtils]: 16: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 14:46:52,200 INFO L290 TraceCheckUtils]: 17: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 14:46:52,200 INFO L290 TraceCheckUtils]: 18: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 14:46:52,201 INFO L290 TraceCheckUtils]: 19: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 14:46:52,203 INFO L290 TraceCheckUtils]: 20: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 14:46:52,204 INFO L290 TraceCheckUtils]: 21: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume 8 == ~tmp_ndt_5~0; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-08 14:46:52,205 INFO L272 TraceCheckUtils]: 22: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:52,205 INFO L290 TraceCheckUtils]: 23: Hoare triple {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {10808#true} is VALID [2022-04-08 14:46:52,205 INFO L290 TraceCheckUtils]: 24: Hoare triple {10808#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {10808#true} is VALID [2022-04-08 14:46:52,205 INFO L290 TraceCheckUtils]: 25: Hoare triple {10808#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {10808#true} is VALID [2022-04-08 14:46:52,205 INFO L290 TraceCheckUtils]: 26: Hoare triple {10808#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {10808#true} is VALID [2022-04-08 14:46:52,206 INFO L272 TraceCheckUtils]: 27: Hoare triple {10808#true} call IofCompleteRequest(~Irp, 0); {10843#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:46:52,206 INFO L290 TraceCheckUtils]: 28: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-08 14:46:52,206 INFO L290 TraceCheckUtils]: 29: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 14:46:52,207 INFO L290 TraceCheckUtils]: 30: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 14:46:52,208 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 14:46:52,208 INFO L290 TraceCheckUtils]: 32: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 14:46:52,209 INFO L290 TraceCheckUtils]: 33: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 14:46:52,210 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #727#return; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-08 14:46:52,210 INFO L290 TraceCheckUtils]: 35: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-08 14:46:52,218 INFO L290 TraceCheckUtils]: 36: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-08 14:46:52,219 INFO L290 TraceCheckUtils]: 37: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-08 14:46:52,219 INFO L290 TraceCheckUtils]: 38: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume ~s~0 != ~UNLOADED~0; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-08 14:46:52,219 INFO L290 TraceCheckUtils]: 39: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -1 != ~status~1; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-08 14:46:52,220 INFO L290 TraceCheckUtils]: 40: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(~s~0 != ~SKIP2~0); {10809#false} is VALID [2022-04-08 14:46:52,220 INFO L290 TraceCheckUtils]: 41: Hoare triple {10809#false} assume 1 == ~pended~0; {10809#false} is VALID [2022-04-08 14:46:52,220 INFO L290 TraceCheckUtils]: 42: Hoare triple {10809#false} assume 259 != ~status~1; {10809#false} is VALID [2022-04-08 14:46:52,220 INFO L272 TraceCheckUtils]: 43: Hoare triple {10809#false} call errorFn(); {10809#false} is VALID [2022-04-08 14:46:52,220 INFO L290 TraceCheckUtils]: 44: Hoare triple {10809#false} assume !false; {10809#false} is VALID [2022-04-08 14:46:52,220 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:46:52,221 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:46:52,221 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1624870570] [2022-04-08 14:46:52,221 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1624870570] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:46:52,221 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:46:52,221 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 14:46:52,221 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:46:52,221 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1344266245] [2022-04-08 14:46:52,222 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1344266245] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:46:52,222 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:46:52,222 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 14:46:52,222 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1713383229] [2022-04-08 14:46:52,222 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:46:52,222 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-08 14:46:52,223 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:46:52,223 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:46:52,259 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:52,260 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-08 14:46:52,260 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:46:52,260 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-08 14:46:52,260 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-08 14:46:52,261 INFO L87 Difference]: Start difference. First operand 304 states and 406 transitions. Second operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:46:55,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:55,484 INFO L93 Difference]: Finished difference Result 334 states and 440 transitions. [2022-04-08 14:46:55,485 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-08 14:46:55,485 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-08 14:46:55,485 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:46:55,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:46:55,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 365 transitions. [2022-04-08 14:46:55,489 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:46:55,492 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 365 transitions. [2022-04-08 14:46:55,492 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 365 transitions. [2022-04-08 14:46:55,852 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:55,861 INFO L225 Difference]: With dead ends: 334 [2022-04-08 14:46:55,861 INFO L226 Difference]: Without dead ends: 325 [2022-04-08 14:46:55,861 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-08 14:46:55,862 INFO L913 BasicCegarLoop]: 255 mSDtfsCounter, 770 mSDsluCounter, 324 mSDsCounter, 0 mSdLazyCounter, 918 mSolverCounterSat, 150 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 772 SdHoareTripleChecker+Valid, 579 SdHoareTripleChecker+Invalid, 1068 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 150 IncrementalHoareTripleChecker+Valid, 918 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-08 14:46:55,862 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [772 Valid, 579 Invalid, 1068 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [150 Valid, 918 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-08 14:46:55,863 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-08 14:46:56,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 320. [2022-04-08 14:46:56,180 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:46:56,180 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 14:46:56,181 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 14:46:56,182 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 14:46:56,190 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:56,191 INFO L93 Difference]: Finished difference Result 325 states and 429 transitions. [2022-04-08 14:46:56,191 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 429 transitions. [2022-04-08 14:46:56,191 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:46:56,192 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:46:56,192 INFO L74 IsIncluded]: Start isIncluded. First operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-08 14:46:56,193 INFO L87 Difference]: Start difference. First operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-08 14:46:56,202 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:46:56,202 INFO L93 Difference]: Finished difference Result 325 states and 429 transitions. [2022-04-08 14:46:56,202 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 429 transitions. [2022-04-08 14:46:56,203 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:46:56,203 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:46:56,203 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:46:56,203 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:46:56,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 14:46:56,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 425 transitions. [2022-04-08 14:46:56,214 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 425 transitions. Word has length 45 [2022-04-08 14:46:56,214 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:46:56,215 INFO L478 AbstractCegarLoop]: Abstraction has 320 states and 425 transitions. [2022-04-08 14:46:56,215 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:46:56,215 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 320 states and 425 transitions. [2022-04-08 14:46:56,740 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 425 edges. 425 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:56,741 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 425 transitions. [2022-04-08 14:46:56,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-08 14:46:56,742 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:46:56,742 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:46:56,742 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-04-08 14:46:56,742 INFO L403 AbstractCegarLoop]: === Iteration 7 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:46:56,743 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:46:56,743 INFO L85 PathProgramCache]: Analyzing trace with hash -1360970565, now seen corresponding path program 1 times [2022-04-08 14:46:56,743 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:46:56,743 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [798120434] [2022-04-08 14:46:56,743 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:46:56,743 INFO L85 PathProgramCache]: Analyzing trace with hash -1360970565, now seen corresponding path program 2 times [2022-04-08 14:46:56,743 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:46:56,744 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [509366547] [2022-04-08 14:46:56,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:46:56,744 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:46:56,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:56,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:46:56,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:56,884 INFO L290 TraceCheckUtils]: 0: Hoare triple {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12822#true} is VALID [2022-04-08 14:46:56,884 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-08 14:46:56,884 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12822#true} {12822#true} #783#return; {12822#true} is VALID [2022-04-08 14:46:56,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:46:56,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:56,925 INFO L290 TraceCheckUtils]: 0: Hoare triple {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-08 14:46:56,925 INFO L290 TraceCheckUtils]: 1: Hoare triple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-08 14:46:56,926 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {12822#true} #715#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:56,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:46:56,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:56,945 INFO L290 TraceCheckUtils]: 0: Hoare triple {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12822#true} is VALID [2022-04-08 14:46:56,945 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-08 14:46:56,946 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12822#true} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #717#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:56,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-08 14:46:56,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:57,010 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-08 14:46:57,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:46:57,033 INFO L290 TraceCheckUtils]: 0: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-08 14:46:57,034 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 14:46:57,034 INFO L290 TraceCheckUtils]: 2: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 14:46:57,035 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 14:46:57,035 INFO L290 TraceCheckUtils]: 0: Hoare triple {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {12822#true} is VALID [2022-04-08 14:46:57,035 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {12822#true} is VALID [2022-04-08 14:46:57,035 INFO L290 TraceCheckUtils]: 2: Hoare triple {12822#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {12822#true} is VALID [2022-04-08 14:46:57,035 INFO L290 TraceCheckUtils]: 3: Hoare triple {12822#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {12822#true} is VALID [2022-04-08 14:46:57,037 INFO L272 TraceCheckUtils]: 4: Hoare triple {12822#true} call IofCompleteRequest(~Irp, 0); {12857#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:46:57,037 INFO L290 TraceCheckUtils]: 5: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-08 14:46:57,038 INFO L290 TraceCheckUtils]: 6: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 14:46:57,038 INFO L290 TraceCheckUtils]: 7: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 14:46:57,039 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 14:46:57,039 INFO L290 TraceCheckUtils]: 9: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 14:46:57,041 INFO L290 TraceCheckUtils]: 10: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 14:46:57,042 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #727#return; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,043 INFO L272 TraceCheckUtils]: 0: Hoare triple {12822#true} call ULTIMATE.init(); {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:46:57,043 INFO L290 TraceCheckUtils]: 1: Hoare triple {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12822#true} is VALID [2022-04-08 14:46:57,043 INFO L290 TraceCheckUtils]: 2: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-08 14:46:57,044 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12822#true} {12822#true} #783#return; {12822#true} is VALID [2022-04-08 14:46:57,044 INFO L272 TraceCheckUtils]: 4: Hoare triple {12822#true} call #t~ret81 := main(); {12822#true} is VALID [2022-04-08 14:46:57,044 INFO L290 TraceCheckUtils]: 5: Hoare triple {12822#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {12822#true} is VALID [2022-04-08 14:46:57,045 INFO L272 TraceCheckUtils]: 6: Hoare triple {12822#true} call _BLAST_init(); {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:57,045 INFO L290 TraceCheckUtils]: 7: Hoare triple {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-08 14:46:57,046 INFO L290 TraceCheckUtils]: 8: Hoare triple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-08 14:46:57,046 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {12822#true} #715#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,047 INFO L290 TraceCheckUtils]: 10: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,047 INFO L290 TraceCheckUtils]: 11: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~irp_choice~0); {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,048 INFO L272 TraceCheckUtils]: 12: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call stub_driver_init(); {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:57,048 INFO L290 TraceCheckUtils]: 13: Hoare triple {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12822#true} is VALID [2022-04-08 14:46:57,048 INFO L290 TraceCheckUtils]: 14: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-08 14:46:57,048 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {12822#true} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #717#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,049 INFO L290 TraceCheckUtils]: 16: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,049 INFO L290 TraceCheckUtils]: 17: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,050 INFO L290 TraceCheckUtils]: 18: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,050 INFO L290 TraceCheckUtils]: 19: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,051 INFO L290 TraceCheckUtils]: 20: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,051 INFO L290 TraceCheckUtils]: 21: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume 8 == ~tmp_ndt_5~0; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,052 INFO L272 TraceCheckUtils]: 22: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:46:57,052 INFO L290 TraceCheckUtils]: 23: Hoare triple {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {12822#true} is VALID [2022-04-08 14:46:57,052 INFO L290 TraceCheckUtils]: 24: Hoare triple {12822#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {12822#true} is VALID [2022-04-08 14:46:57,052 INFO L290 TraceCheckUtils]: 25: Hoare triple {12822#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {12822#true} is VALID [2022-04-08 14:46:57,052 INFO L290 TraceCheckUtils]: 26: Hoare triple {12822#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {12822#true} is VALID [2022-04-08 14:46:57,053 INFO L272 TraceCheckUtils]: 27: Hoare triple {12822#true} call IofCompleteRequest(~Irp, 0); {12857#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:46:57,053 INFO L290 TraceCheckUtils]: 28: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-08 14:46:57,053 INFO L290 TraceCheckUtils]: 29: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 14:46:57,054 INFO L290 TraceCheckUtils]: 30: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-08 14:46:57,054 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 14:46:57,055 INFO L290 TraceCheckUtils]: 32: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 14:46:57,055 INFO L290 TraceCheckUtils]: 33: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-08 14:46:57,056 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #727#return; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,057 INFO L290 TraceCheckUtils]: 35: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,057 INFO L290 TraceCheckUtils]: 36: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,058 INFO L290 TraceCheckUtils]: 37: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,058 INFO L290 TraceCheckUtils]: 38: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~UNLOADED~0; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,059 INFO L290 TraceCheckUtils]: 39: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -1 != ~status~1; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,059 INFO L290 TraceCheckUtils]: 40: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~SKIP2~0; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-08 14:46:57,060 INFO L290 TraceCheckUtils]: 41: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(~s~0 != ~IPC~0); {12823#false} is VALID [2022-04-08 14:46:57,060 INFO L290 TraceCheckUtils]: 42: Hoare triple {12823#false} assume 1 == ~pended~0; {12823#false} is VALID [2022-04-08 14:46:57,060 INFO L290 TraceCheckUtils]: 43: Hoare triple {12823#false} assume 259 != ~status~1; {12823#false} is VALID [2022-04-08 14:46:57,061 INFO L272 TraceCheckUtils]: 44: Hoare triple {12823#false} call errorFn(); {12823#false} is VALID [2022-04-08 14:46:57,061 INFO L290 TraceCheckUtils]: 45: Hoare triple {12823#false} assume !false; {12823#false} is VALID [2022-04-08 14:46:57,061 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:46:57,061 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:46:57,061 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [509366547] [2022-04-08 14:46:57,061 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [509366547] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:46:57,061 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:46:57,062 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 14:46:57,062 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:46:57,062 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [798120434] [2022-04-08 14:46:57,062 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [798120434] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:46:57,062 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:46:57,062 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 14:46:57,062 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1314836313] [2022-04-08 14:46:57,062 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:46:57,063 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-08 14:46:57,063 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:46:57,063 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:46:57,098 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:46:57,099 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-08 14:46:57,099 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:46:57,099 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-08 14:46:57,099 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-08 14:46:57,100 INFO L87 Difference]: Start difference. First operand 320 states and 425 transitions. Second operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:47:00,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:00,264 INFO L93 Difference]: Finished difference Result 330 states and 433 transitions. [2022-04-08 14:47:00,264 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-08 14:47:00,264 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-08 14:47:00,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:00,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:47:00,269 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 358 transitions. [2022-04-08 14:47:00,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:47:00,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 358 transitions. [2022-04-08 14:47:00,273 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 358 transitions. [2022-04-08 14:47:00,627 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 358 edges. 358 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:00,635 INFO L225 Difference]: With dead ends: 330 [2022-04-08 14:47:00,636 INFO L226 Difference]: Without dead ends: 325 [2022-04-08 14:47:00,636 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-08 14:47:00,637 INFO L913 BasicCegarLoop]: 256 mSDtfsCounter, 521 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 824 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 523 SdHoareTripleChecker+Valid, 533 SdHoareTripleChecker+Invalid, 916 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 824 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:00,637 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [523 Valid, 533 Invalid, 916 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 824 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-04-08 14:47:00,638 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-08 14:47:01,038 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 320. [2022-04-08 14:47:01,038 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:01,039 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 14:47:01,040 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 14:47:01,041 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 14:47:01,049 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:01,050 INFO L93 Difference]: Finished difference Result 325 states and 428 transitions. [2022-04-08 14:47:01,050 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 428 transitions. [2022-04-08 14:47:01,050 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:01,051 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:01,051 INFO L74 IsIncluded]: Start isIncluded. First operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-08 14:47:01,052 INFO L87 Difference]: Start difference. First operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-08 14:47:01,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:01,060 INFO L93 Difference]: Finished difference Result 325 states and 428 transitions. [2022-04-08 14:47:01,060 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 428 transitions. [2022-04-08 14:47:01,060 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:01,061 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:01,061 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:01,061 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:01,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-08 14:47:01,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 424 transitions. [2022-04-08 14:47:01,071 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 424 transitions. Word has length 46 [2022-04-08 14:47:01,071 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:01,071 INFO L478 AbstractCegarLoop]: Abstraction has 320 states and 424 transitions. [2022-04-08 14:47:01,071 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:47:01,071 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 320 states and 424 transitions. [2022-04-08 14:47:01,548 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 424 edges. 424 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:01,548 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 424 transitions. [2022-04-08 14:47:01,549 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-04-08 14:47:01,549 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:01,549 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:01,549 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-04-08 14:47:01,549 INFO L403 AbstractCegarLoop]: === Iteration 8 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:01,549 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:01,550 INFO L85 PathProgramCache]: Analyzing trace with hash 548356508, now seen corresponding path program 1 times [2022-04-08 14:47:01,550 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:01,550 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1191599464] [2022-04-08 14:47:01,550 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:01,550 INFO L85 PathProgramCache]: Analyzing trace with hash 548356508, now seen corresponding path program 2 times [2022-04-08 14:47:01,550 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:01,550 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [192786250] [2022-04-08 14:47:01,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:01,550 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:01,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:01,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:01,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:01,646 INFO L290 TraceCheckUtils]: 0: Hoare triple {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-08 14:47:01,647 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 14:47:01,647 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #783#return; {14828#true} is VALID [2022-04-08 14:47:01,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:01,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:01,672 INFO L290 TraceCheckUtils]: 0: Hoare triple {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-08 14:47:01,672 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 14:47:01,672 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #715#return; {14828#true} is VALID [2022-04-08 14:47:01,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:01,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:01,686 INFO L290 TraceCheckUtils]: 0: Hoare triple {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-08 14:47:01,687 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 14:47:01,687 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #717#return; {14828#true} is VALID [2022-04-08 14:47:01,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-08 14:47:01,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:01,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-08 14:47:01,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:01,720 INFO L290 TraceCheckUtils]: 0: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-08 14:47:01,720 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-08 14:47:01,720 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 14:47:01,720 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-08 14:47:01,720 INFO L290 TraceCheckUtils]: 0: Hoare triple {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {14828#true} is VALID [2022-04-08 14:47:01,720 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {14828#true} is VALID [2022-04-08 14:47:01,720 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {14828#true} is VALID [2022-04-08 14:47:01,721 INFO L290 TraceCheckUtils]: 3: Hoare triple {14828#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {14828#true} is VALID [2022-04-08 14:47:01,721 INFO L272 TraceCheckUtils]: 4: Hoare triple {14828#true} call IofCompleteRequest(~Irp, 0); {14860#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:01,722 INFO L290 TraceCheckUtils]: 5: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-08 14:47:01,722 INFO L290 TraceCheckUtils]: 6: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-08 14:47:01,722 INFO L290 TraceCheckUtils]: 7: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 14:47:01,722 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-08 14:47:01,724 INFO L290 TraceCheckUtils]: 9: Hoare triple {14828#true} #res := ~status~3; {14828#true} is VALID [2022-04-08 14:47:01,726 INFO L290 TraceCheckUtils]: 10: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 14:47:01,727 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {14828#true} {14828#true} #727#return; {14828#true} is VALID [2022-04-08 14:47:01,728 INFO L272 TraceCheckUtils]: 0: Hoare triple {14828#true} call ULTIMATE.init(); {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:01,728 INFO L290 TraceCheckUtils]: 1: Hoare triple {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-08 14:47:01,728 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 14:47:01,729 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14828#true} {14828#true} #783#return; {14828#true} is VALID [2022-04-08 14:47:01,729 INFO L272 TraceCheckUtils]: 4: Hoare triple {14828#true} call #t~ret81 := main(); {14828#true} is VALID [2022-04-08 14:47:01,729 INFO L290 TraceCheckUtils]: 5: Hoare triple {14828#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {14828#true} is VALID [2022-04-08 14:47:01,733 INFO L272 TraceCheckUtils]: 6: Hoare triple {14828#true} call _BLAST_init(); {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:01,733 INFO L290 TraceCheckUtils]: 7: Hoare triple {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-08 14:47:01,733 INFO L290 TraceCheckUtils]: 8: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 14:47:01,733 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {14828#true} {14828#true} #715#return; {14828#true} is VALID [2022-04-08 14:47:01,733 INFO L290 TraceCheckUtils]: 10: Hoare triple {14828#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-08 14:47:01,733 INFO L290 TraceCheckUtils]: 11: Hoare triple {14828#true} assume !(0 == ~irp_choice~0); {14828#true} is VALID [2022-04-08 14:47:01,734 INFO L272 TraceCheckUtils]: 12: Hoare triple {14828#true} call stub_driver_init(); {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:01,734 INFO L290 TraceCheckUtils]: 13: Hoare triple {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-08 14:47:01,734 INFO L290 TraceCheckUtils]: 14: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 14:47:01,734 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {14828#true} {14828#true} #717#return; {14828#true} is VALID [2022-04-08 14:47:01,735 INFO L290 TraceCheckUtils]: 16: Hoare triple {14828#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {14828#true} is VALID [2022-04-08 14:47:01,735 INFO L290 TraceCheckUtils]: 17: Hoare triple {14828#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {14828#true} is VALID [2022-04-08 14:47:01,735 INFO L290 TraceCheckUtils]: 18: Hoare triple {14828#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {14828#true} is VALID [2022-04-08 14:47:01,735 INFO L290 TraceCheckUtils]: 19: Hoare triple {14828#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {14828#true} is VALID [2022-04-08 14:47:01,735 INFO L290 TraceCheckUtils]: 20: Hoare triple {14828#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {14828#true} is VALID [2022-04-08 14:47:01,735 INFO L290 TraceCheckUtils]: 21: Hoare triple {14828#true} assume 8 == ~tmp_ndt_5~0; {14828#true} is VALID [2022-04-08 14:47:01,736 INFO L272 TraceCheckUtils]: 22: Hoare triple {14828#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:01,736 INFO L290 TraceCheckUtils]: 23: Hoare triple {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {14828#true} is VALID [2022-04-08 14:47:01,736 INFO L290 TraceCheckUtils]: 24: Hoare triple {14828#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {14828#true} is VALID [2022-04-08 14:47:01,736 INFO L290 TraceCheckUtils]: 25: Hoare triple {14828#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {14828#true} is VALID [2022-04-08 14:47:01,736 INFO L290 TraceCheckUtils]: 26: Hoare triple {14828#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {14828#true} is VALID [2022-04-08 14:47:01,737 INFO L272 TraceCheckUtils]: 27: Hoare triple {14828#true} call IofCompleteRequest(~Irp, 0); {14860#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:01,737 INFO L290 TraceCheckUtils]: 28: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-08 14:47:01,737 INFO L290 TraceCheckUtils]: 29: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-08 14:47:01,737 INFO L290 TraceCheckUtils]: 30: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 14:47:01,737 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-08 14:47:01,737 INFO L290 TraceCheckUtils]: 32: Hoare triple {14828#true} #res := ~status~3; {14828#true} is VALID [2022-04-08 14:47:01,737 INFO L290 TraceCheckUtils]: 33: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-08 14:47:01,737 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {14828#true} {14828#true} #727#return; {14828#true} is VALID [2022-04-08 14:47:01,737 INFO L290 TraceCheckUtils]: 35: Hoare triple {14828#true} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {14828#true} is VALID [2022-04-08 14:47:01,738 INFO L290 TraceCheckUtils]: 36: Hoare triple {14828#true} assume !(1 == ~pended~0); {14851#(not (= ~pended~0 1))} is VALID [2022-04-08 14:47:01,738 INFO L290 TraceCheckUtils]: 37: Hoare triple {14851#(not (= ~pended~0 1))} assume !(1 == ~pended~0); {14851#(not (= ~pended~0 1))} is VALID [2022-04-08 14:47:01,738 INFO L290 TraceCheckUtils]: 38: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~UNLOADED~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-08 14:47:01,739 INFO L290 TraceCheckUtils]: 39: Hoare triple {14851#(not (= ~pended~0 1))} assume -1 != ~status~1; {14851#(not (= ~pended~0 1))} is VALID [2022-04-08 14:47:01,739 INFO L290 TraceCheckUtils]: 40: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~SKIP2~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-08 14:47:01,740 INFO L290 TraceCheckUtils]: 41: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~IPC~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-08 14:47:01,740 INFO L290 TraceCheckUtils]: 42: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 == ~DC~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-08 14:47:01,740 INFO L290 TraceCheckUtils]: 43: Hoare triple {14851#(not (= ~pended~0 1))} assume 1 == ~pended~0; {14829#false} is VALID [2022-04-08 14:47:01,740 INFO L290 TraceCheckUtils]: 44: Hoare triple {14829#false} assume 259 != ~status~1; {14829#false} is VALID [2022-04-08 14:47:01,741 INFO L272 TraceCheckUtils]: 45: Hoare triple {14829#false} call errorFn(); {14829#false} is VALID [2022-04-08 14:47:01,741 INFO L290 TraceCheckUtils]: 46: Hoare triple {14829#false} assume !false; {14829#false} is VALID [2022-04-08 14:47:01,741 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:01,742 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:01,742 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [192786250] [2022-04-08 14:47:01,742 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [192786250] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:01,742 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:01,742 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 14:47:01,742 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:01,742 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1191599464] [2022-04-08 14:47:01,742 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1191599464] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:01,742 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:01,742 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 14:47:01,743 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [539156831] [2022-04-08 14:47:01,743 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:01,744 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-08 14:47:01,744 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:01,744 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:01,777 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:01,777 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-08 14:47:01,777 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:01,778 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-08 14:47:01,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-04-08 14:47:01,778 INFO L87 Difference]: Start difference. First operand 320 states and 424 transitions. Second operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:03,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:03,736 INFO L93 Difference]: Finished difference Result 338 states and 446 transitions. [2022-04-08 14:47:03,736 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-08 14:47:03,736 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-08 14:47:03,737 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:03,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:03,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 346 transitions. [2022-04-08 14:47:03,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:03,746 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 346 transitions. [2022-04-08 14:47:03,746 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 346 transitions. [2022-04-08 14:47:04,064 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 346 edges. 346 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:04,068 INFO L225 Difference]: With dead ends: 338 [2022-04-08 14:47:04,069 INFO L226 Difference]: Without dead ends: 272 [2022-04-08 14:47:04,069 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=49, Invalid=83, Unknown=0, NotChecked=0, Total=132 [2022-04-08 14:47:04,069 INFO L913 BasicCegarLoop]: 250 mSDtfsCounter, 724 mSDsluCounter, 177 mSDsCounter, 0 mSdLazyCounter, 415 mSolverCounterSat, 119 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 724 SdHoareTripleChecker+Valid, 427 SdHoareTripleChecker+Invalid, 534 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 119 IncrementalHoareTripleChecker+Valid, 415 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:04,070 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [724 Valid, 427 Invalid, 534 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [119 Valid, 415 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-08 14:47:04,070 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2022-04-08 14:47:04,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 242. [2022-04-08 14:47:04,400 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:04,401 INFO L82 GeneralOperation]: Start isEquivalent. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:04,401 INFO L74 IsIncluded]: Start isIncluded. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:04,402 INFO L87 Difference]: Start difference. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:04,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:04,408 INFO L93 Difference]: Finished difference Result 272 states and 356 transitions. [2022-04-08 14:47:04,408 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 356 transitions. [2022-04-08 14:47:04,408 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:04,409 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:04,410 INFO L74 IsIncluded]: Start isIncluded. First operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 272 states. [2022-04-08 14:47:04,410 INFO L87 Difference]: Start difference. First operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 272 states. [2022-04-08 14:47:04,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:04,416 INFO L93 Difference]: Finished difference Result 272 states and 356 transitions. [2022-04-08 14:47:04,417 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 356 transitions. [2022-04-08 14:47:04,417 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:04,417 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:04,417 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:04,417 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:04,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:04,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 321 transitions. [2022-04-08 14:47:04,424 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 321 transitions. Word has length 47 [2022-04-08 14:47:04,424 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:04,424 INFO L478 AbstractCegarLoop]: Abstraction has 242 states and 321 transitions. [2022-04-08 14:47:04,425 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:04,425 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 242 states and 321 transitions. [2022-04-08 14:47:04,875 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 321 edges. 321 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:04,875 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 321 transitions. [2022-04-08 14:47:04,876 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-08 14:47:04,876 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:04,876 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:04,876 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-04-08 14:47:04,876 INFO L403 AbstractCegarLoop]: === Iteration 9 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:04,877 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:04,877 INFO L85 PathProgramCache]: Analyzing trace with hash 916659597, now seen corresponding path program 1 times [2022-04-08 14:47:04,877 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:04,877 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [608038455] [2022-04-08 14:47:04,877 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:04,878 INFO L85 PathProgramCache]: Analyzing trace with hash 916659597, now seen corresponding path program 2 times [2022-04-08 14:47:04,878 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:04,878 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1318719662] [2022-04-08 14:47:04,878 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:04,878 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:04,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:04,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:04,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:04,974 INFO L290 TraceCheckUtils]: 0: Hoare triple {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-08 14:47:04,974 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 14:47:04,975 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #783#return; {16577#true} is VALID [2022-04-08 14:47:04,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:04,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:05,000 INFO L290 TraceCheckUtils]: 0: Hoare triple {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-08 14:47:05,000 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 14:47:05,000 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #715#return; {16577#true} is VALID [2022-04-08 14:47:05,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:05,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:05,015 INFO L290 TraceCheckUtils]: 0: Hoare triple {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-08 14:47:05,015 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 14:47:05,015 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #717#return; {16577#true} is VALID [2022-04-08 14:47:05,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-04-08 14:47:05,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:05,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-08 14:47:05,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:05,037 INFO L290 TraceCheckUtils]: 0: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-08 14:47:05,038 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 14:47:05,038 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-08 14:47:05,038 INFO L290 TraceCheckUtils]: 0: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16577#true} is VALID [2022-04-08 14:47:05,038 INFO L272 TraceCheckUtils]: 1: Hoare triple {16577#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:05,039 INFO L290 TraceCheckUtils]: 2: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-08 14:47:05,039 INFO L290 TraceCheckUtils]: 3: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 14:47:05,039 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-08 14:47:05,039 INFO L290 TraceCheckUtils]: 5: Hoare triple {16577#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {16577#true} is VALID [2022-04-08 14:47:05,039 INFO L290 TraceCheckUtils]: 6: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 14:47:05,039 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {16577#true} {16577#true} #777#return; {16577#true} is VALID [2022-04-08 14:47:05,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-04-08 14:47:05,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:05,051 INFO L290 TraceCheckUtils]: 0: Hoare triple {16607#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 14:47:05,052 INFO L290 TraceCheckUtils]: 1: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 14:47:05,052 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {16577#true} #779#return; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 14:47:05,053 INFO L272 TraceCheckUtils]: 0: Hoare triple {16577#true} call ULTIMATE.init(); {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:05,053 INFO L290 TraceCheckUtils]: 1: Hoare triple {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-08 14:47:05,054 INFO L290 TraceCheckUtils]: 2: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 14:47:05,054 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {16577#true} {16577#true} #783#return; {16577#true} is VALID [2022-04-08 14:47:05,054 INFO L272 TraceCheckUtils]: 4: Hoare triple {16577#true} call #t~ret81 := main(); {16577#true} is VALID [2022-04-08 14:47:05,054 INFO L290 TraceCheckUtils]: 5: Hoare triple {16577#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {16577#true} is VALID [2022-04-08 14:47:05,055 INFO L272 TraceCheckUtils]: 6: Hoare triple {16577#true} call _BLAST_init(); {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:05,055 INFO L290 TraceCheckUtils]: 7: Hoare triple {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-08 14:47:05,055 INFO L290 TraceCheckUtils]: 8: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 14:47:05,055 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {16577#true} {16577#true} #715#return; {16577#true} is VALID [2022-04-08 14:47:05,055 INFO L290 TraceCheckUtils]: 10: Hoare triple {16577#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-08 14:47:05,055 INFO L290 TraceCheckUtils]: 11: Hoare triple {16577#true} assume !(0 == ~irp_choice~0); {16577#true} is VALID [2022-04-08 14:47:05,056 INFO L272 TraceCheckUtils]: 12: Hoare triple {16577#true} call stub_driver_init(); {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:05,056 INFO L290 TraceCheckUtils]: 13: Hoare triple {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-08 14:47:05,056 INFO L290 TraceCheckUtils]: 14: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 14:47:05,056 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16577#true} {16577#true} #717#return; {16577#true} is VALID [2022-04-08 14:47:05,056 INFO L290 TraceCheckUtils]: 16: Hoare triple {16577#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {16577#true} is VALID [2022-04-08 14:47:05,057 INFO L290 TraceCheckUtils]: 17: Hoare triple {16577#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {16577#true} is VALID [2022-04-08 14:47:05,057 INFO L290 TraceCheckUtils]: 18: Hoare triple {16577#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {16577#true} is VALID [2022-04-08 14:47:05,057 INFO L290 TraceCheckUtils]: 19: Hoare triple {16577#true} assume 3 == ~tmp_ndt_3~0; {16577#true} is VALID [2022-04-08 14:47:05,057 INFO L272 TraceCheckUtils]: 20: Hoare triple {16577#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {16577#true} is VALID [2022-04-08 14:47:05,057 INFO L290 TraceCheckUtils]: 21: Hoare triple {16577#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {16577#true} is VALID [2022-04-08 14:47:05,057 INFO L290 TraceCheckUtils]: 22: Hoare triple {16577#true} assume 0 == ~irpStack__MinorFunction~0; {16577#true} is VALID [2022-04-08 14:47:05,057 INFO L290 TraceCheckUtils]: 23: Hoare triple {16577#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {16577#true} is VALID [2022-04-08 14:47:05,057 INFO L290 TraceCheckUtils]: 24: Hoare triple {16577#true} assume !(~s~0 != ~NP~0); {16577#true} is VALID [2022-04-08 14:47:05,057 INFO L290 TraceCheckUtils]: 25: Hoare triple {16577#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {16577#true} is VALID [2022-04-08 14:47:05,058 INFO L290 TraceCheckUtils]: 26: Hoare triple {16577#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {16577#true} is VALID [2022-04-08 14:47:05,058 INFO L272 TraceCheckUtils]: 27: Hoare triple {16577#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {16577#true} is VALID [2022-04-08 14:47:05,058 INFO L290 TraceCheckUtils]: 28: Hoare triple {16577#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {16577#true} is VALID [2022-04-08 14:47:05,058 INFO L290 TraceCheckUtils]: 29: Hoare triple {16577#true} assume 0 != ~compRegistered~0; {16577#true} is VALID [2022-04-08 14:47:05,059 INFO L272 TraceCheckUtils]: 30: Hoare triple {16577#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:05,059 INFO L290 TraceCheckUtils]: 31: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16577#true} is VALID [2022-04-08 14:47:05,060 INFO L272 TraceCheckUtils]: 32: Hoare triple {16577#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:05,060 INFO L290 TraceCheckUtils]: 33: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-08 14:47:05,060 INFO L290 TraceCheckUtils]: 34: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 14:47:05,060 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-08 14:47:05,060 INFO L290 TraceCheckUtils]: 36: Hoare triple {16577#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {16577#true} is VALID [2022-04-08 14:47:05,060 INFO L290 TraceCheckUtils]: 37: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-08 14:47:05,060 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {16577#true} {16577#true} #777#return; {16577#true} is VALID [2022-04-08 14:47:05,060 INFO L290 TraceCheckUtils]: 39: Hoare triple {16577#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {16577#true} is VALID [2022-04-08 14:47:05,060 INFO L290 TraceCheckUtils]: 40: Hoare triple {16577#true} assume -1073741802 == ~__cil_tmp7~0; {16577#true} is VALID [2022-04-08 14:47:05,061 INFO L272 TraceCheckUtils]: 41: Hoare triple {16577#true} call stubMoreProcessingRequired(); {16607#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:05,061 INFO L290 TraceCheckUtils]: 42: Hoare triple {16607#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 14:47:05,062 INFO L290 TraceCheckUtils]: 43: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 14:47:05,062 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {16577#true} #779#return; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 14:47:05,062 INFO L290 TraceCheckUtils]: 45: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 14:47:05,063 INFO L290 TraceCheckUtils]: 46: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume 0 == ~tmp_ndt_6~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 14:47:05,063 INFO L290 TraceCheckUtils]: 47: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} ~returnVal2~0 := 0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 14:47:05,063 INFO L290 TraceCheckUtils]: 48: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~NP~0); {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-08 14:47:05,064 INFO L290 TraceCheckUtils]: 49: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~MPR1~0); {16578#false} is VALID [2022-04-08 14:47:05,064 INFO L290 TraceCheckUtils]: 50: Hoare triple {16578#false} assume !(~s~0 == ~SKIP1~0); {16578#false} is VALID [2022-04-08 14:47:05,064 INFO L272 TraceCheckUtils]: 51: Hoare triple {16578#false} call errorFn(); {16578#false} is VALID [2022-04-08 14:47:05,064 INFO L290 TraceCheckUtils]: 52: Hoare triple {16578#false} assume !false; {16578#false} is VALID [2022-04-08 14:47:05,065 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:05,065 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:05,065 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1318719662] [2022-04-08 14:47:05,065 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1318719662] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:05,065 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:05,065 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 14:47:05,065 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:05,065 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [608038455] [2022-04-08 14:47:05,065 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [608038455] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:05,066 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:05,066 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 14:47:05,066 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [933066085] [2022-04-08 14:47:05,066 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:05,066 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-08 14:47:05,066 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:05,066 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:05,103 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:05,103 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-08 14:47:05,103 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:05,103 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-08 14:47:05,104 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-04-08 14:47:05,104 INFO L87 Difference]: Start difference. First operand 242 states and 321 transitions. Second operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:06,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:06,610 INFO L93 Difference]: Finished difference Result 270 states and 354 transitions. [2022-04-08 14:47:06,610 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-08 14:47:06,610 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-08 14:47:06,610 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:06,611 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:06,614 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 341 transitions. [2022-04-08 14:47:06,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:06,617 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 341 transitions. [2022-04-08 14:47:06,617 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 341 transitions. [2022-04-08 14:47:06,982 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 341 edges. 341 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:06,988 INFO L225 Difference]: With dead ends: 270 [2022-04-08 14:47:06,988 INFO L226 Difference]: Without dead ends: 240 [2022-04-08 14:47:06,989 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=67, Unknown=0, NotChecked=0, Total=110 [2022-04-08 14:47:06,989 INFO L913 BasicCegarLoop]: 243 mSDtfsCounter, 484 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 347 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 484 SdHoareTripleChecker+Valid, 461 SdHoareTripleChecker+Invalid, 448 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 347 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:06,989 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [484 Valid, 461 Invalid, 448 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 347 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-08 14:47:06,990 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-04-08 14:47:07,304 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 240. [2022-04-08 14:47:07,304 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:07,305 INFO L82 GeneralOperation]: Start isEquivalent. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:07,305 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:07,306 INFO L87 Difference]: Start difference. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:07,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:07,310 INFO L93 Difference]: Finished difference Result 240 states and 317 transitions. [2022-04-08 14:47:07,311 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-08 14:47:07,311 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:07,311 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:07,312 INFO L74 IsIncluded]: Start isIncluded. First operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-08 14:47:07,312 INFO L87 Difference]: Start difference. First operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-08 14:47:07,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:07,317 INFO L93 Difference]: Finished difference Result 240 states and 317 transitions. [2022-04-08 14:47:07,317 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-08 14:47:07,318 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:07,318 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:07,318 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:07,318 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:07,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:07,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 317 transitions. [2022-04-08 14:47:07,324 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 317 transitions. Word has length 53 [2022-04-08 14:47:07,324 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:07,324 INFO L478 AbstractCegarLoop]: Abstraction has 240 states and 317 transitions. [2022-04-08 14:47:07,325 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:07,325 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 240 states and 317 transitions. [2022-04-08 14:47:07,693 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 317 edges. 317 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:07,694 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-08 14:47:07,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-04-08 14:47:07,694 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:07,694 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:07,695 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-04-08 14:47:07,695 INFO L403 AbstractCegarLoop]: === Iteration 10 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:07,695 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:07,695 INFO L85 PathProgramCache]: Analyzing trace with hash -1556296422, now seen corresponding path program 1 times [2022-04-08 14:47:07,695 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:07,695 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1997088302] [2022-04-08 14:47:07,696 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:07,696 INFO L85 PathProgramCache]: Analyzing trace with hash -1556296422, now seen corresponding path program 2 times [2022-04-08 14:47:07,696 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:07,696 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1106598221] [2022-04-08 14:47:07,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:07,696 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:07,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:07,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:07,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:07,767 INFO L290 TraceCheckUtils]: 0: Hoare triple {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18117#true} is VALID [2022-04-08 14:47:07,768 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-08 14:47:07,768 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18117#true} {18117#true} #783#return; {18117#true} is VALID [2022-04-08 14:47:07,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:07,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:07,794 INFO L290 TraceCheckUtils]: 0: Hoare triple {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,794 INFO L290 TraceCheckUtils]: 1: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume true; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,795 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18125#(not (= ~SKIP1~0 ~NP~0))} {18117#true} #715#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:07,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:07,808 INFO L290 TraceCheckUtils]: 0: Hoare triple {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18117#true} is VALID [2022-04-08 14:47:07,809 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-08 14:47:07,809 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18117#true} {18125#(not (= ~SKIP1~0 ~NP~0))} #717#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-08 14:47:07,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:07,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-08 14:47:07,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:07,865 INFO L290 TraceCheckUtils]: 0: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,865 INFO L290 TraceCheckUtils]: 1: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,866 INFO L290 TraceCheckUtils]: 2: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,866 INFO L290 TraceCheckUtils]: 3: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,866 INFO L290 TraceCheckUtils]: 4: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,867 INFO L290 TraceCheckUtils]: 5: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,867 INFO L290 TraceCheckUtils]: 6: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,868 INFO L290 TraceCheckUtils]: 7: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,868 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-08 14:47:07,869 INFO L290 TraceCheckUtils]: 0: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {18117#true} is VALID [2022-04-08 14:47:07,869 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume 2 == ~irpStack__MinorFunction~1; {18117#true} is VALID [2022-04-08 14:47:07,869 INFO L290 TraceCheckUtils]: 2: Hoare triple {18117#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {18117#true} is VALID [2022-04-08 14:47:07,869 INFO L290 TraceCheckUtils]: 3: Hoare triple {18117#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:47:07,870 INFO L290 TraceCheckUtils]: 4: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:47:07,871 INFO L272 TraceCheckUtils]: 5: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:07,871 INFO L290 TraceCheckUtils]: 6: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,871 INFO L290 TraceCheckUtils]: 7: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,872 INFO L290 TraceCheckUtils]: 8: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,872 INFO L290 TraceCheckUtils]: 9: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,872 INFO L290 TraceCheckUtils]: 10: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,873 INFO L290 TraceCheckUtils]: 11: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,873 INFO L290 TraceCheckUtils]: 12: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,873 INFO L290 TraceCheckUtils]: 13: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,874 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-08 14:47:07,874 INFO L290 TraceCheckUtils]: 15: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-08 14:47:07,874 INFO L290 TraceCheckUtils]: 16: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume true; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-08 14:47:07,875 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {18161#(= ~SKIP1~0 ~NP~0)} {18125#(not (= ~SKIP1~0 ~NP~0))} #725#return; {18118#false} is VALID [2022-04-08 14:47:07,877 INFO L272 TraceCheckUtils]: 0: Hoare triple {18117#true} call ULTIMATE.init(); {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:07,877 INFO L290 TraceCheckUtils]: 1: Hoare triple {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18117#true} is VALID [2022-04-08 14:47:07,877 INFO L290 TraceCheckUtils]: 2: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-08 14:47:07,877 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {18117#true} {18117#true} #783#return; {18117#true} is VALID [2022-04-08 14:47:07,878 INFO L272 TraceCheckUtils]: 4: Hoare triple {18117#true} call #t~ret81 := main(); {18117#true} is VALID [2022-04-08 14:47:07,878 INFO L290 TraceCheckUtils]: 5: Hoare triple {18117#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {18117#true} is VALID [2022-04-08 14:47:07,879 INFO L272 TraceCheckUtils]: 6: Hoare triple {18117#true} call _BLAST_init(); {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:07,879 INFO L290 TraceCheckUtils]: 7: Hoare triple {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,880 INFO L290 TraceCheckUtils]: 8: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume true; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,880 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {18125#(not (= ~SKIP1~0 ~NP~0))} {18117#true} #715#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,880 INFO L290 TraceCheckUtils]: 10: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,881 INFO L290 TraceCheckUtils]: 11: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(0 == ~irp_choice~0); {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,881 INFO L272 TraceCheckUtils]: 12: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} call stub_driver_init(); {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:07,881 INFO L290 TraceCheckUtils]: 13: Hoare triple {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18117#true} is VALID [2022-04-08 14:47:07,882 INFO L290 TraceCheckUtils]: 14: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-08 14:47:07,882 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {18117#true} {18125#(not (= ~SKIP1~0 ~NP~0))} #717#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,882 INFO L290 TraceCheckUtils]: 16: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,882 INFO L290 TraceCheckUtils]: 17: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,883 INFO L290 TraceCheckUtils]: 18: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,883 INFO L290 TraceCheckUtils]: 19: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,883 INFO L290 TraceCheckUtils]: 20: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume 4 == ~tmp_ndt_4~0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-08 14:47:07,884 INFO L272 TraceCheckUtils]: 21: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:07,884 INFO L290 TraceCheckUtils]: 22: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {18117#true} is VALID [2022-04-08 14:47:07,884 INFO L290 TraceCheckUtils]: 23: Hoare triple {18117#true} assume 2 == ~irpStack__MinorFunction~1; {18117#true} is VALID [2022-04-08 14:47:07,884 INFO L290 TraceCheckUtils]: 24: Hoare triple {18117#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {18117#true} is VALID [2022-04-08 14:47:07,885 INFO L290 TraceCheckUtils]: 25: Hoare triple {18117#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:47:07,885 INFO L290 TraceCheckUtils]: 26: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:47:07,886 INFO L272 TraceCheckUtils]: 27: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:07,886 INFO L290 TraceCheckUtils]: 28: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,886 INFO L290 TraceCheckUtils]: 29: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,887 INFO L290 TraceCheckUtils]: 30: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,887 INFO L290 TraceCheckUtils]: 31: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,887 INFO L290 TraceCheckUtils]: 32: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,888 INFO L290 TraceCheckUtils]: 33: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,888 INFO L290 TraceCheckUtils]: 34: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,888 INFO L290 TraceCheckUtils]: 35: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:07,889 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-08 14:47:07,889 INFO L290 TraceCheckUtils]: 37: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-08 14:47:07,890 INFO L290 TraceCheckUtils]: 38: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume true; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-08 14:47:07,890 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {18161#(= ~SKIP1~0 ~NP~0)} {18125#(not (= ~SKIP1~0 ~NP~0))} #725#return; {18118#false} is VALID [2022-04-08 14:47:07,891 INFO L290 TraceCheckUtils]: 40: Hoare triple {18118#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {18118#false} is VALID [2022-04-08 14:47:07,891 INFO L290 TraceCheckUtils]: 41: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-08 14:47:07,891 INFO L290 TraceCheckUtils]: 42: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-08 14:47:07,891 INFO L290 TraceCheckUtils]: 43: Hoare triple {18118#false} assume ~s~0 != ~UNLOADED~0; {18118#false} is VALID [2022-04-08 14:47:07,891 INFO L290 TraceCheckUtils]: 44: Hoare triple {18118#false} assume -1 != ~status~1; {18118#false} is VALID [2022-04-08 14:47:07,891 INFO L290 TraceCheckUtils]: 45: Hoare triple {18118#false} assume !(~s~0 != ~SKIP2~0); {18118#false} is VALID [2022-04-08 14:47:07,891 INFO L290 TraceCheckUtils]: 46: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-08 14:47:07,891 INFO L290 TraceCheckUtils]: 47: Hoare triple {18118#false} assume !(~s~0 == ~DC~0); {18118#false} is VALID [2022-04-08 14:47:07,891 INFO L290 TraceCheckUtils]: 48: Hoare triple {18118#false} assume ~status~1 != ~lowerDriverReturn~0; {18118#false} is VALID [2022-04-08 14:47:07,891 INFO L272 TraceCheckUtils]: 49: Hoare triple {18118#false} call errorFn(); {18118#false} is VALID [2022-04-08 14:47:07,892 INFO L290 TraceCheckUtils]: 50: Hoare triple {18118#false} assume !false; {18118#false} is VALID [2022-04-08 14:47:07,892 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:07,892 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:07,892 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1106598221] [2022-04-08 14:47:07,892 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1106598221] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:07,892 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:07,892 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-08 14:47:07,892 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:07,892 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1997088302] [2022-04-08 14:47:07,892 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1997088302] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:07,893 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:07,893 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-08 14:47:07,893 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [143891922] [2022-04-08 14:47:07,893 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:07,893 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 51 [2022-04-08 14:47:07,893 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:07,893 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 14:47:07,928 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:07,928 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-08 14:47:07,928 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:07,928 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-08 14:47:07,928 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-08 14:47:07,929 INFO L87 Difference]: Start difference. First operand 240 states and 317 transitions. Second operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 14:47:10,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:10,418 INFO L93 Difference]: Finished difference Result 284 states and 365 transitions. [2022-04-08 14:47:10,418 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-08 14:47:10,419 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 51 [2022-04-08 14:47:10,419 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:10,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 14:47:10,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 365 transitions. [2022-04-08 14:47:10,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 14:47:10,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 365 transitions. [2022-04-08 14:47:10,424 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 365 transitions. [2022-04-08 14:47:10,760 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:10,764 INFO L225 Difference]: With dead ends: 284 [2022-04-08 14:47:10,764 INFO L226 Difference]: Without dead ends: 243 [2022-04-08 14:47:10,764 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=109, Invalid=311, Unknown=0, NotChecked=0, Total=420 [2022-04-08 14:47:10,765 INFO L913 BasicCegarLoop]: 252 mSDtfsCounter, 655 mSDsluCounter, 341 mSDsCounter, 0 mSdLazyCounter, 741 mSolverCounterSat, 143 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 660 SdHoareTripleChecker+Valid, 593 SdHoareTripleChecker+Invalid, 884 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 143 IncrementalHoareTripleChecker+Valid, 741 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:10,765 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [660 Valid, 593 Invalid, 884 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [143 Valid, 741 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-08 14:47:10,766 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2022-04-08 14:47:11,082 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 240. [2022-04-08 14:47:11,082 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:11,083 INFO L82 GeneralOperation]: Start isEquivalent. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:11,083 INFO L74 IsIncluded]: Start isIncluded. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:11,084 INFO L87 Difference]: Start difference. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:11,087 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:11,087 INFO L93 Difference]: Finished difference Result 243 states and 317 transitions. [2022-04-08 14:47:11,087 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 317 transitions. [2022-04-08 14:47:11,088 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:11,088 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:11,088 INFO L74 IsIncluded]: Start isIncluded. First operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 243 states. [2022-04-08 14:47:11,089 INFO L87 Difference]: Start difference. First operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 243 states. [2022-04-08 14:47:11,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:11,094 INFO L93 Difference]: Finished difference Result 243 states and 317 transitions. [2022-04-08 14:47:11,094 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 317 transitions. [2022-04-08 14:47:11,094 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:11,094 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:11,094 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:11,095 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:11,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:11,100 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 315 transitions. [2022-04-08 14:47:11,101 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 315 transitions. Word has length 51 [2022-04-08 14:47:11,101 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:11,101 INFO L478 AbstractCegarLoop]: Abstraction has 240 states and 315 transitions. [2022-04-08 14:47:11,101 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 14:47:11,101 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 240 states and 315 transitions. [2022-04-08 14:47:11,482 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 315 edges. 315 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:11,482 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 315 transitions. [2022-04-08 14:47:11,483 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-08 14:47:11,483 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:11,483 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:11,483 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-04-08 14:47:11,483 INFO L403 AbstractCegarLoop]: === Iteration 11 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:11,484 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:11,484 INFO L85 PathProgramCache]: Analyzing trace with hash 460482069, now seen corresponding path program 1 times [2022-04-08 14:47:11,484 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:11,484 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1157605423] [2022-04-08 14:47:11,484 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:11,484 INFO L85 PathProgramCache]: Analyzing trace with hash 460482069, now seen corresponding path program 2 times [2022-04-08 14:47:11,484 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:11,484 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1874867168] [2022-04-08 14:47:11,484 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:11,485 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:11,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:11,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:11,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:11,594 INFO L290 TraceCheckUtils]: 0: Hoare triple {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {19722#true} is VALID [2022-04-08 14:47:11,594 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-08 14:47:11,594 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19722#true} {19722#true} #783#return; {19722#true} is VALID [2022-04-08 14:47:11,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:11,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:11,629 INFO L290 TraceCheckUtils]: 0: Hoare triple {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 14:47:11,630 INFO L290 TraceCheckUtils]: 1: Hoare triple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 14:47:11,630 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {19722#true} #715#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:11,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:11,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:11,652 INFO L290 TraceCheckUtils]: 0: Hoare triple {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19722#true} is VALID [2022-04-08 14:47:11,652 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-08 14:47:11,652 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19722#true} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:11,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-08 14:47:11,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:11,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-08 14:47:11,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:11,723 INFO L290 TraceCheckUtils]: 0: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-08 14:47:11,723 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-08 14:47:11,723 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-08 14:47:11,723 INFO L290 TraceCheckUtils]: 3: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-08 14:47:11,724 INFO L290 TraceCheckUtils]: 4: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-08 14:47:11,724 INFO L290 TraceCheckUtils]: 5: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-08 14:47:11,724 INFO L290 TraceCheckUtils]: 6: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-08 14:47:11,725 INFO L290 TraceCheckUtils]: 7: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-08 14:47:11,725 INFO L290 TraceCheckUtils]: 8: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-08 14:47:11,725 INFO L290 TraceCheckUtils]: 9: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-08 14:47:11,725 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-08 14:47:11,725 INFO L290 TraceCheckUtils]: 0: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {19722#true} is VALID [2022-04-08 14:47:11,725 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume 2 == ~irpStack__MinorFunction~1; {19722#true} is VALID [2022-04-08 14:47:11,726 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {19722#true} is VALID [2022-04-08 14:47:11,726 INFO L290 TraceCheckUtils]: 3: Hoare triple {19722#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {19722#true} is VALID [2022-04-08 14:47:11,726 INFO L290 TraceCheckUtils]: 4: Hoare triple {19722#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {19722#true} is VALID [2022-04-08 14:47:11,726 INFO L272 TraceCheckUtils]: 5: Hoare triple {19722#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:11,727 INFO L290 TraceCheckUtils]: 6: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-08 14:47:11,727 INFO L290 TraceCheckUtils]: 7: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-08 14:47:11,727 INFO L290 TraceCheckUtils]: 8: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-08 14:47:11,727 INFO L290 TraceCheckUtils]: 9: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-08 14:47:11,727 INFO L290 TraceCheckUtils]: 10: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-08 14:47:11,728 INFO L290 TraceCheckUtils]: 11: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-08 14:47:11,728 INFO L290 TraceCheckUtils]: 12: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-08 14:47:11,728 INFO L290 TraceCheckUtils]: 13: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-08 14:47:11,728 INFO L290 TraceCheckUtils]: 14: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-08 14:47:11,729 INFO L290 TraceCheckUtils]: 15: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-08 14:47:11,729 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-08 14:47:11,729 INFO L290 TraceCheckUtils]: 17: Hoare triple {19723#false} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {19723#false} is VALID [2022-04-08 14:47:11,729 INFO L290 TraceCheckUtils]: 18: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-08 14:47:11,729 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {19723#false} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {19723#false} is VALID [2022-04-08 14:47:11,730 INFO L272 TraceCheckUtils]: 0: Hoare triple {19722#true} call ULTIMATE.init(); {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:11,730 INFO L290 TraceCheckUtils]: 1: Hoare triple {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {19722#true} is VALID [2022-04-08 14:47:11,731 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-08 14:47:11,731 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {19722#true} {19722#true} #783#return; {19722#true} is VALID [2022-04-08 14:47:11,731 INFO L272 TraceCheckUtils]: 4: Hoare triple {19722#true} call #t~ret81 := main(); {19722#true} is VALID [2022-04-08 14:47:11,731 INFO L290 TraceCheckUtils]: 5: Hoare triple {19722#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {19722#true} is VALID [2022-04-08 14:47:11,732 INFO L272 TraceCheckUtils]: 6: Hoare triple {19722#true} call _BLAST_init(); {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:11,733 INFO L290 TraceCheckUtils]: 7: Hoare triple {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 14:47:11,733 INFO L290 TraceCheckUtils]: 8: Hoare triple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 14:47:11,733 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {19722#true} #715#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:11,734 INFO L290 TraceCheckUtils]: 10: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:11,734 INFO L290 TraceCheckUtils]: 11: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~irp_choice~0); {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:11,735 INFO L272 TraceCheckUtils]: 12: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call stub_driver_init(); {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:11,735 INFO L290 TraceCheckUtils]: 13: Hoare triple {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19722#true} is VALID [2022-04-08 14:47:11,735 INFO L290 TraceCheckUtils]: 14: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-08 14:47:11,736 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {19722#true} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:11,736 INFO L290 TraceCheckUtils]: 16: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:11,737 INFO L290 TraceCheckUtils]: 17: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:11,737 INFO L290 TraceCheckUtils]: 18: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:11,737 INFO L290 TraceCheckUtils]: 19: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:11,738 INFO L290 TraceCheckUtils]: 20: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 4 == ~tmp_ndt_4~0; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:11,738 INFO L272 TraceCheckUtils]: 21: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:11,739 INFO L290 TraceCheckUtils]: 22: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {19722#true} is VALID [2022-04-08 14:47:11,739 INFO L290 TraceCheckUtils]: 23: Hoare triple {19722#true} assume 2 == ~irpStack__MinorFunction~1; {19722#true} is VALID [2022-04-08 14:47:11,739 INFO L290 TraceCheckUtils]: 24: Hoare triple {19722#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {19722#true} is VALID [2022-04-08 14:47:11,739 INFO L290 TraceCheckUtils]: 25: Hoare triple {19722#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {19722#true} is VALID [2022-04-08 14:47:11,739 INFO L290 TraceCheckUtils]: 26: Hoare triple {19722#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {19722#true} is VALID [2022-04-08 14:47:11,740 INFO L272 TraceCheckUtils]: 27: Hoare triple {19722#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:11,740 INFO L290 TraceCheckUtils]: 28: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-08 14:47:11,740 INFO L290 TraceCheckUtils]: 29: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-08 14:47:11,740 INFO L290 TraceCheckUtils]: 30: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-08 14:47:11,740 INFO L290 TraceCheckUtils]: 31: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-08 14:47:11,740 INFO L290 TraceCheckUtils]: 32: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-08 14:47:11,741 INFO L290 TraceCheckUtils]: 33: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-08 14:47:11,741 INFO L290 TraceCheckUtils]: 34: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-08 14:47:11,741 INFO L290 TraceCheckUtils]: 35: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-08 14:47:11,741 INFO L290 TraceCheckUtils]: 36: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-08 14:47:11,742 INFO L290 TraceCheckUtils]: 37: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-08 14:47:11,742 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-08 14:47:11,742 INFO L290 TraceCheckUtils]: 39: Hoare triple {19723#false} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {19723#false} is VALID [2022-04-08 14:47:11,742 INFO L290 TraceCheckUtils]: 40: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-08 14:47:11,742 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {19723#false} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {19723#false} is VALID [2022-04-08 14:47:11,742 INFO L290 TraceCheckUtils]: 42: Hoare triple {19723#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {19723#false} is VALID [2022-04-08 14:47:11,742 INFO L290 TraceCheckUtils]: 43: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-08 14:47:11,742 INFO L290 TraceCheckUtils]: 44: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-08 14:47:11,742 INFO L290 TraceCheckUtils]: 45: Hoare triple {19723#false} assume ~s~0 != ~UNLOADED~0; {19723#false} is VALID [2022-04-08 14:47:11,742 INFO L290 TraceCheckUtils]: 46: Hoare triple {19723#false} assume -1 != ~status~1; {19723#false} is VALID [2022-04-08 14:47:11,743 INFO L290 TraceCheckUtils]: 47: Hoare triple {19723#false} assume !(~s~0 != ~SKIP2~0); {19723#false} is VALID [2022-04-08 14:47:11,743 INFO L290 TraceCheckUtils]: 48: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-08 14:47:11,743 INFO L290 TraceCheckUtils]: 49: Hoare triple {19723#false} assume !(~s~0 == ~DC~0); {19723#false} is VALID [2022-04-08 14:47:11,743 INFO L290 TraceCheckUtils]: 50: Hoare triple {19723#false} assume ~status~1 != ~lowerDriverReturn~0; {19723#false} is VALID [2022-04-08 14:47:11,743 INFO L272 TraceCheckUtils]: 51: Hoare triple {19723#false} call errorFn(); {19723#false} is VALID [2022-04-08 14:47:11,743 INFO L290 TraceCheckUtils]: 52: Hoare triple {19723#false} assume !false; {19723#false} is VALID [2022-04-08 14:47:11,743 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:11,744 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:11,744 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1874867168] [2022-04-08 14:47:11,744 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1874867168] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:11,744 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:11,744 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-08 14:47:11,744 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:11,744 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1157605423] [2022-04-08 14:47:11,744 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1157605423] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:11,744 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:11,744 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-08 14:47:11,745 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1001239244] [2022-04-08 14:47:11,745 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:11,746 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 53 [2022-04-08 14:47:11,746 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:11,746 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:47:11,782 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:11,782 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-08 14:47:11,782 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:11,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-08 14:47:11,783 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2022-04-08 14:47:11,783 INFO L87 Difference]: Start difference. First operand 240 states and 315 transitions. Second operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:47:13,979 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:13,979 INFO L93 Difference]: Finished difference Result 272 states and 349 transitions. [2022-04-08 14:47:13,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-08 14:47:13,980 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 53 [2022-04-08 14:47:13,980 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:13,980 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:47:13,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 325 transitions. [2022-04-08 14:47:13,984 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:47:13,989 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 325 transitions. [2022-04-08 14:47:13,989 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 325 transitions. [2022-04-08 14:47:14,315 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 325 edges. 325 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:14,320 INFO L225 Difference]: With dead ends: 272 [2022-04-08 14:47:14,321 INFO L226 Difference]: Without dead ends: 253 [2022-04-08 14:47:14,321 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 37 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=95, Invalid=211, Unknown=0, NotChecked=0, Total=306 [2022-04-08 14:47:14,322 INFO L913 BasicCegarLoop]: 238 mSDtfsCounter, 723 mSDsluCounter, 298 mSDsCounter, 0 mSdLazyCounter, 434 mSolverCounterSat, 102 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 726 SdHoareTripleChecker+Valid, 536 SdHoareTripleChecker+Invalid, 536 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 102 IncrementalHoareTripleChecker+Valid, 434 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:14,322 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [726 Valid, 536 Invalid, 536 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [102 Valid, 434 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-08 14:47:14,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 253 states. [2022-04-08 14:47:14,732 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 253 to 243. [2022-04-08 14:47:14,732 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:14,733 INFO L82 GeneralOperation]: Start isEquivalent. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:14,733 INFO L74 IsIncluded]: Start isIncluded. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:14,733 INFO L87 Difference]: Start difference. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:14,741 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:14,741 INFO L93 Difference]: Finished difference Result 253 states and 329 transitions. [2022-04-08 14:47:14,741 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 329 transitions. [2022-04-08 14:47:14,742 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:14,742 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:14,742 INFO L74 IsIncluded]: Start isIncluded. First operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 253 states. [2022-04-08 14:47:14,743 INFO L87 Difference]: Start difference. First operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 253 states. [2022-04-08 14:47:14,749 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:14,750 INFO L93 Difference]: Finished difference Result 253 states and 329 transitions. [2022-04-08 14:47:14,750 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 329 transitions. [2022-04-08 14:47:14,750 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:14,750 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:14,750 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:14,750 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:14,751 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:14,758 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 319 transitions. [2022-04-08 14:47:14,758 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 319 transitions. Word has length 53 [2022-04-08 14:47:14,758 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:14,758 INFO L478 AbstractCegarLoop]: Abstraction has 243 states and 319 transitions. [2022-04-08 14:47:14,758 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-08 14:47:14,759 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 243 states and 319 transitions. [2022-04-08 14:47:15,185 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 319 edges. 319 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:15,185 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 319 transitions. [2022-04-08 14:47:15,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-08 14:47:15,186 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:15,186 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:15,186 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-04-08 14:47:15,186 INFO L403 AbstractCegarLoop]: === Iteration 12 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:15,187 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:15,187 INFO L85 PathProgramCache]: Analyzing trace with hash -1533662637, now seen corresponding path program 1 times [2022-04-08 14:47:15,187 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:15,187 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1814940891] [2022-04-08 14:47:15,187 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:15,187 INFO L85 PathProgramCache]: Analyzing trace with hash -1533662637, now seen corresponding path program 2 times [2022-04-08 14:47:15,187 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:15,187 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1090097952] [2022-04-08 14:47:15,188 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:15,188 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:15,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:15,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:15,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:15,271 INFO L290 TraceCheckUtils]: 0: Hoare triple {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {21327#true} is VALID [2022-04-08 14:47:15,271 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-08 14:47:15,271 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21327#true} {21327#true} #783#return; {21327#true} is VALID [2022-04-08 14:47:15,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:15,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:15,309 INFO L290 TraceCheckUtils]: 0: Hoare triple {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 14:47:15,309 INFO L290 TraceCheckUtils]: 1: Hoare triple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 14:47:15,310 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {21327#true} #715#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:15,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:15,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:15,325 INFO L290 TraceCheckUtils]: 0: Hoare triple {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21327#true} is VALID [2022-04-08 14:47:15,325 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-08 14:47:15,325 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21327#true} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:15,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-08 14:47:15,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:15,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-08 14:47:15,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:15,392 INFO L290 TraceCheckUtils]: 0: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,392 INFO L290 TraceCheckUtils]: 1: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,393 INFO L290 TraceCheckUtils]: 2: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,393 INFO L290 TraceCheckUtils]: 3: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,393 INFO L290 TraceCheckUtils]: 4: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,394 INFO L290 TraceCheckUtils]: 5: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,394 INFO L290 TraceCheckUtils]: 6: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,394 INFO L290 TraceCheckUtils]: 7: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,395 INFO L290 TraceCheckUtils]: 8: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,395 INFO L290 TraceCheckUtils]: 9: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,396 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-08 14:47:15,396 INFO L290 TraceCheckUtils]: 0: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {21327#true} is VALID [2022-04-08 14:47:15,396 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume 2 == ~irpStack__MinorFunction~1; {21327#true} is VALID [2022-04-08 14:47:15,396 INFO L290 TraceCheckUtils]: 2: Hoare triple {21327#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {21327#true} is VALID [2022-04-08 14:47:15,397 INFO L290 TraceCheckUtils]: 3: Hoare triple {21327#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:47:15,397 INFO L290 TraceCheckUtils]: 4: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:47:15,398 INFO L272 TraceCheckUtils]: 5: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:15,398 INFO L290 TraceCheckUtils]: 6: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,399 INFO L290 TraceCheckUtils]: 7: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,399 INFO L290 TraceCheckUtils]: 8: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,399 INFO L290 TraceCheckUtils]: 9: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,400 INFO L290 TraceCheckUtils]: 10: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,400 INFO L290 TraceCheckUtils]: 11: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,400 INFO L290 TraceCheckUtils]: 12: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,401 INFO L290 TraceCheckUtils]: 13: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,401 INFO L290 TraceCheckUtils]: 14: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,401 INFO L290 TraceCheckUtils]: 15: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,402 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-08 14:47:15,402 INFO L290 TraceCheckUtils]: 17: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-08 14:47:15,403 INFO L290 TraceCheckUtils]: 18: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume true; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-08 14:47:15,404 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {21376#(= ~MPR1~0 ~SKIP1~0)} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {21328#false} is VALID [2022-04-08 14:47:15,405 INFO L272 TraceCheckUtils]: 0: Hoare triple {21327#true} call ULTIMATE.init(); {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:15,405 INFO L290 TraceCheckUtils]: 1: Hoare triple {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {21327#true} is VALID [2022-04-08 14:47:15,406 INFO L290 TraceCheckUtils]: 2: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-08 14:47:15,406 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {21327#true} {21327#true} #783#return; {21327#true} is VALID [2022-04-08 14:47:15,406 INFO L272 TraceCheckUtils]: 4: Hoare triple {21327#true} call #t~ret81 := main(); {21327#true} is VALID [2022-04-08 14:47:15,406 INFO L290 TraceCheckUtils]: 5: Hoare triple {21327#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {21327#true} is VALID [2022-04-08 14:47:15,407 INFO L272 TraceCheckUtils]: 6: Hoare triple {21327#true} call _BLAST_init(); {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:15,408 INFO L290 TraceCheckUtils]: 7: Hoare triple {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 14:47:15,408 INFO L290 TraceCheckUtils]: 8: Hoare triple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-08 14:47:15,409 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {21327#true} #715#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:15,409 INFO L290 TraceCheckUtils]: 10: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:15,409 INFO L290 TraceCheckUtils]: 11: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~irp_choice~0); {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:15,410 INFO L272 TraceCheckUtils]: 12: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call stub_driver_init(); {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:15,410 INFO L290 TraceCheckUtils]: 13: Hoare triple {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21327#true} is VALID [2022-04-08 14:47:15,410 INFO L290 TraceCheckUtils]: 14: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-08 14:47:15,411 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {21327#true} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:15,411 INFO L290 TraceCheckUtils]: 16: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:15,412 INFO L290 TraceCheckUtils]: 17: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:15,412 INFO L290 TraceCheckUtils]: 18: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:15,412 INFO L290 TraceCheckUtils]: 19: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:15,413 INFO L290 TraceCheckUtils]: 20: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 4 == ~tmp_ndt_4~0; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-08 14:47:15,414 INFO L272 TraceCheckUtils]: 21: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:15,414 INFO L290 TraceCheckUtils]: 22: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {21327#true} is VALID [2022-04-08 14:47:15,414 INFO L290 TraceCheckUtils]: 23: Hoare triple {21327#true} assume 2 == ~irpStack__MinorFunction~1; {21327#true} is VALID [2022-04-08 14:47:15,414 INFO L290 TraceCheckUtils]: 24: Hoare triple {21327#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {21327#true} is VALID [2022-04-08 14:47:15,414 INFO L290 TraceCheckUtils]: 25: Hoare triple {21327#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:47:15,415 INFO L290 TraceCheckUtils]: 26: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-08 14:47:15,415 INFO L272 TraceCheckUtils]: 27: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:15,416 INFO L290 TraceCheckUtils]: 28: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,416 INFO L290 TraceCheckUtils]: 29: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,416 INFO L290 TraceCheckUtils]: 30: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,417 INFO L290 TraceCheckUtils]: 31: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,417 INFO L290 TraceCheckUtils]: 32: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,417 INFO L290 TraceCheckUtils]: 33: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,418 INFO L290 TraceCheckUtils]: 34: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,418 INFO L290 TraceCheckUtils]: 35: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,418 INFO L290 TraceCheckUtils]: 36: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,418 INFO L290 TraceCheckUtils]: 37: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-08 14:47:15,419 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-08 14:47:15,419 INFO L290 TraceCheckUtils]: 39: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-08 14:47:15,420 INFO L290 TraceCheckUtils]: 40: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume true; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-08 14:47:15,420 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {21376#(= ~MPR1~0 ~SKIP1~0)} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {21328#false} is VALID [2022-04-08 14:47:15,421 INFO L290 TraceCheckUtils]: 42: Hoare triple {21328#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {21328#false} is VALID [2022-04-08 14:47:15,421 INFO L290 TraceCheckUtils]: 43: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-08 14:47:15,421 INFO L290 TraceCheckUtils]: 44: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-08 14:47:15,421 INFO L290 TraceCheckUtils]: 45: Hoare triple {21328#false} assume ~s~0 != ~UNLOADED~0; {21328#false} is VALID [2022-04-08 14:47:15,421 INFO L290 TraceCheckUtils]: 46: Hoare triple {21328#false} assume -1 != ~status~1; {21328#false} is VALID [2022-04-08 14:47:15,421 INFO L290 TraceCheckUtils]: 47: Hoare triple {21328#false} assume !(~s~0 != ~SKIP2~0); {21328#false} is VALID [2022-04-08 14:47:15,421 INFO L290 TraceCheckUtils]: 48: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-08 14:47:15,421 INFO L290 TraceCheckUtils]: 49: Hoare triple {21328#false} assume !(~s~0 == ~DC~0); {21328#false} is VALID [2022-04-08 14:47:15,421 INFO L290 TraceCheckUtils]: 50: Hoare triple {21328#false} assume ~status~1 != ~lowerDriverReturn~0; {21328#false} is VALID [2022-04-08 14:47:15,421 INFO L272 TraceCheckUtils]: 51: Hoare triple {21328#false} call errorFn(); {21328#false} is VALID [2022-04-08 14:47:15,422 INFO L290 TraceCheckUtils]: 52: Hoare triple {21328#false} assume !false; {21328#false} is VALID [2022-04-08 14:47:15,422 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:15,422 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:15,422 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1090097952] [2022-04-08 14:47:15,422 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1090097952] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:15,422 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:15,423 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 14:47:15,423 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:15,423 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1814940891] [2022-04-08 14:47:15,423 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1814940891] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:15,423 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:15,423 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 14:47:15,423 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1876269621] [2022-04-08 14:47:15,423 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:15,424 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 53 [2022-04-08 14:47:15,424 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:15,424 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 14:47:15,462 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:15,462 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-08 14:47:15,462 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:15,463 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-08 14:47:15,463 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-08 14:47:15,464 INFO L87 Difference]: Start difference. First operand 243 states and 319 transitions. Second operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 14:47:18,357 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:18,357 INFO L93 Difference]: Finished difference Result 284 states and 365 transitions. [2022-04-08 14:47:18,357 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-08 14:47:18,358 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 53 [2022-04-08 14:47:18,358 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:18,358 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 14:47:18,361 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 347 transitions. [2022-04-08 14:47:18,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 14:47:18,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 347 transitions. [2022-04-08 14:47:18,364 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 347 transitions. [2022-04-08 14:47:18,697 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 347 edges. 347 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:18,701 INFO L225 Difference]: With dead ends: 284 [2022-04-08 14:47:18,701 INFO L226 Difference]: Without dead ends: 240 [2022-04-08 14:47:18,701 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=101, Invalid=279, Unknown=0, NotChecked=0, Total=380 [2022-04-08 14:47:18,702 INFO L913 BasicCegarLoop]: 234 mSDtfsCounter, 964 mSDsluCounter, 349 mSDsCounter, 0 mSdLazyCounter, 711 mSolverCounterSat, 177 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 965 SdHoareTripleChecker+Valid, 583 SdHoareTripleChecker+Invalid, 888 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 177 IncrementalHoareTripleChecker+Valid, 711 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:18,702 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [965 Valid, 583 Invalid, 888 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [177 Valid, 711 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-08 14:47:18,702 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-04-08 14:47:19,099 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 238. [2022-04-08 14:47:19,099 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:19,100 INFO L82 GeneralOperation]: Start isEquivalent. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:19,100 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:19,101 INFO L87 Difference]: Start difference. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:19,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:19,107 INFO L93 Difference]: Finished difference Result 240 states and 311 transitions. [2022-04-08 14:47:19,107 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 311 transitions. [2022-04-08 14:47:19,107 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:19,107 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:19,107 INFO L74 IsIncluded]: Start isIncluded. First operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-08 14:47:19,108 INFO L87 Difference]: Start difference. First operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-08 14:47:19,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:19,113 INFO L93 Difference]: Finished difference Result 240 states and 311 transitions. [2022-04-08 14:47:19,113 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 311 transitions. [2022-04-08 14:47:19,113 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:19,113 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:19,114 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:19,114 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:19,114 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-08 14:47:19,120 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 238 states to 238 states and 309 transitions. [2022-04-08 14:47:19,120 INFO L78 Accepts]: Start accepts. Automaton has 238 states and 309 transitions. Word has length 53 [2022-04-08 14:47:19,120 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:19,120 INFO L478 AbstractCegarLoop]: Abstraction has 238 states and 309 transitions. [2022-04-08 14:47:19,120 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-08 14:47:19,121 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 238 states and 309 transitions. [2022-04-08 14:47:19,503 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 309 edges. 309 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:19,504 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 309 transitions. [2022-04-08 14:47:19,504 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-08 14:47:19,504 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:19,505 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:19,505 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-04-08 14:47:19,505 INFO L403 AbstractCegarLoop]: === Iteration 13 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:19,505 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:19,505 INFO L85 PathProgramCache]: Analyzing trace with hash -1386969835, now seen corresponding path program 1 times [2022-04-08 14:47:19,505 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:19,506 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1041599965] [2022-04-08 14:47:19,506 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:19,506 INFO L85 PathProgramCache]: Analyzing trace with hash -1386969835, now seen corresponding path program 2 times [2022-04-08 14:47:19,506 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:19,506 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1827942985] [2022-04-08 14:47:19,506 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:19,506 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:19,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:19,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:19,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:19,579 INFO L290 TraceCheckUtils]: 0: Hoare triple {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-08 14:47:19,579 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-08 14:47:19,579 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #783#return; {22923#true} is VALID [2022-04-08 14:47:19,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:19,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:19,605 INFO L290 TraceCheckUtils]: 0: Hoare triple {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-08 14:47:19,605 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-08 14:47:19,605 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #715#return; {22923#true} is VALID [2022-04-08 14:47:19,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:19,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:19,620 INFO L290 TraceCheckUtils]: 0: Hoare triple {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-08 14:47:19,620 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-08 14:47:19,620 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #717#return; {22923#true} is VALID [2022-04-08 14:47:19,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-08 14:47:19,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:19,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-08 14:47:19,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:19,672 INFO L290 TraceCheckUtils]: 0: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-08 14:47:19,672 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-08 14:47:19,672 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-08 14:47:19,672 INFO L290 TraceCheckUtils]: 3: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-08 14:47:19,672 INFO L290 TraceCheckUtils]: 4: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-08 14:47:19,672 INFO L290 TraceCheckUtils]: 5: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-08 14:47:19,672 INFO L290 TraceCheckUtils]: 6: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-08 14:47:19,673 INFO L290 TraceCheckUtils]: 7: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-08 14:47:19,673 INFO L290 TraceCheckUtils]: 8: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,673 INFO L290 TraceCheckUtils]: 9: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,674 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-08 14:47:19,674 INFO L290 TraceCheckUtils]: 0: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {22923#true} is VALID [2022-04-08 14:47:19,674 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume 2 == ~irpStack__MinorFunction~1; {22923#true} is VALID [2022-04-08 14:47:19,675 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {22923#true} is VALID [2022-04-08 14:47:19,675 INFO L290 TraceCheckUtils]: 3: Hoare triple {22923#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {22923#true} is VALID [2022-04-08 14:47:19,675 INFO L290 TraceCheckUtils]: 4: Hoare triple {22923#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {22923#true} is VALID [2022-04-08 14:47:19,678 INFO L272 TraceCheckUtils]: 5: Hoare triple {22923#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:19,678 INFO L290 TraceCheckUtils]: 6: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-08 14:47:19,678 INFO L290 TraceCheckUtils]: 7: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-08 14:47:19,678 INFO L290 TraceCheckUtils]: 8: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-08 14:47:19,679 INFO L290 TraceCheckUtils]: 9: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-08 14:47:19,679 INFO L290 TraceCheckUtils]: 10: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-08 14:47:19,679 INFO L290 TraceCheckUtils]: 11: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-08 14:47:19,679 INFO L290 TraceCheckUtils]: 12: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-08 14:47:19,679 INFO L290 TraceCheckUtils]: 13: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-08 14:47:19,680 INFO L290 TraceCheckUtils]: 14: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,680 INFO L290 TraceCheckUtils]: 15: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,680 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-08 14:47:19,681 INFO L290 TraceCheckUtils]: 17: Hoare triple {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,681 INFO L290 TraceCheckUtils]: 18: Hoare triple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} assume true; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,682 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} {22923#true} #725#return; {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,684 INFO L272 TraceCheckUtils]: 0: Hoare triple {22923#true} call ULTIMATE.init(); {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:19,684 INFO L290 TraceCheckUtils]: 1: Hoare triple {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-08 14:47:19,684 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-08 14:47:19,685 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {22923#true} {22923#true} #783#return; {22923#true} is VALID [2022-04-08 14:47:19,685 INFO L272 TraceCheckUtils]: 4: Hoare triple {22923#true} call #t~ret81 := main(); {22923#true} is VALID [2022-04-08 14:47:19,685 INFO L290 TraceCheckUtils]: 5: Hoare triple {22923#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {22923#true} is VALID [2022-04-08 14:47:19,686 INFO L272 TraceCheckUtils]: 6: Hoare triple {22923#true} call _BLAST_init(); {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:19,686 INFO L290 TraceCheckUtils]: 7: Hoare triple {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-08 14:47:19,686 INFO L290 TraceCheckUtils]: 8: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-08 14:47:19,686 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {22923#true} {22923#true} #715#return; {22923#true} is VALID [2022-04-08 14:47:19,686 INFO L290 TraceCheckUtils]: 10: Hoare triple {22923#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-08 14:47:19,686 INFO L290 TraceCheckUtils]: 11: Hoare triple {22923#true} assume !(0 == ~irp_choice~0); {22923#true} is VALID [2022-04-08 14:47:19,687 INFO L272 TraceCheckUtils]: 12: Hoare triple {22923#true} call stub_driver_init(); {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:19,687 INFO L290 TraceCheckUtils]: 13: Hoare triple {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-08 14:47:19,687 INFO L290 TraceCheckUtils]: 14: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-08 14:47:19,687 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {22923#true} {22923#true} #717#return; {22923#true} is VALID [2022-04-08 14:47:19,687 INFO L290 TraceCheckUtils]: 16: Hoare triple {22923#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {22923#true} is VALID [2022-04-08 14:47:19,687 INFO L290 TraceCheckUtils]: 17: Hoare triple {22923#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {22923#true} is VALID [2022-04-08 14:47:19,688 INFO L290 TraceCheckUtils]: 18: Hoare triple {22923#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {22923#true} is VALID [2022-04-08 14:47:19,688 INFO L290 TraceCheckUtils]: 19: Hoare triple {22923#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {22923#true} is VALID [2022-04-08 14:47:19,688 INFO L290 TraceCheckUtils]: 20: Hoare triple {22923#true} assume 4 == ~tmp_ndt_4~0; {22923#true} is VALID [2022-04-08 14:47:19,688 INFO L272 TraceCheckUtils]: 21: Hoare triple {22923#true} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:19,689 INFO L290 TraceCheckUtils]: 22: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {22923#true} is VALID [2022-04-08 14:47:19,689 INFO L290 TraceCheckUtils]: 23: Hoare triple {22923#true} assume 2 == ~irpStack__MinorFunction~1; {22923#true} is VALID [2022-04-08 14:47:19,689 INFO L290 TraceCheckUtils]: 24: Hoare triple {22923#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {22923#true} is VALID [2022-04-08 14:47:19,689 INFO L290 TraceCheckUtils]: 25: Hoare triple {22923#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {22923#true} is VALID [2022-04-08 14:47:19,689 INFO L290 TraceCheckUtils]: 26: Hoare triple {22923#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {22923#true} is VALID [2022-04-08 14:47:19,690 INFO L272 TraceCheckUtils]: 27: Hoare triple {22923#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:19,690 INFO L290 TraceCheckUtils]: 28: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-08 14:47:19,690 INFO L290 TraceCheckUtils]: 29: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-08 14:47:19,690 INFO L290 TraceCheckUtils]: 30: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-08 14:47:19,690 INFO L290 TraceCheckUtils]: 31: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-08 14:47:19,690 INFO L290 TraceCheckUtils]: 32: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-08 14:47:19,690 INFO L290 TraceCheckUtils]: 33: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-08 14:47:19,690 INFO L290 TraceCheckUtils]: 34: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-08 14:47:19,691 INFO L290 TraceCheckUtils]: 35: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-08 14:47:19,691 INFO L290 TraceCheckUtils]: 36: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,691 INFO L290 TraceCheckUtils]: 37: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,692 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-08 14:47:19,693 INFO L290 TraceCheckUtils]: 39: Hoare triple {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,693 INFO L290 TraceCheckUtils]: 40: Hoare triple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} assume true; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,694 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} {22923#true} #725#return; {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,694 INFO L290 TraceCheckUtils]: 42: Hoare triple {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,694 INFO L290 TraceCheckUtils]: 43: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,695 INFO L290 TraceCheckUtils]: 44: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,695 INFO L290 TraceCheckUtils]: 45: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,695 INFO L290 TraceCheckUtils]: 46: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,696 INFO L290 TraceCheckUtils]: 47: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,696 INFO L290 TraceCheckUtils]: 48: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,696 INFO L290 TraceCheckUtils]: 49: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:19,697 INFO L290 TraceCheckUtils]: 50: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {22924#false} is VALID [2022-04-08 14:47:19,697 INFO L272 TraceCheckUtils]: 51: Hoare triple {22924#false} call errorFn(); {22924#false} is VALID [2022-04-08 14:47:19,697 INFO L290 TraceCheckUtils]: 52: Hoare triple {22924#false} assume !false; {22924#false} is VALID [2022-04-08 14:47:19,697 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:19,697 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:19,697 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1827942985] [2022-04-08 14:47:19,697 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1827942985] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:19,698 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:19,698 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 14:47:19,698 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:19,698 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1041599965] [2022-04-08 14:47:19,698 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1041599965] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:19,698 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:19,698 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-08 14:47:19,698 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1107164430] [2022-04-08 14:47:19,698 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:19,699 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 53 [2022-04-08 14:47:19,699 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:19,699 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:19,735 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:19,735 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-08 14:47:19,735 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:19,735 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-08 14:47:19,736 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=105, Unknown=0, NotChecked=0, Total=132 [2022-04-08 14:47:19,736 INFO L87 Difference]: Start difference. First operand 238 states and 309 transitions. Second operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:22,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:22,877 INFO L93 Difference]: Finished difference Result 250 states and 321 transitions. [2022-04-08 14:47:22,878 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-04-08 14:47:22,878 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 53 [2022-04-08 14:47:22,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:22,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:22,881 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 297 transitions. [2022-04-08 14:47:22,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:22,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 297 transitions. [2022-04-08 14:47:22,883 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 11 states and 297 transitions. [2022-04-08 14:47:23,153 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 297 edges. 297 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:23,157 INFO L225 Difference]: With dead ends: 250 [2022-04-08 14:47:23,157 INFO L226 Difference]: Without dead ends: 210 [2022-04-08 14:47:23,157 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2022-04-08 14:47:23,158 INFO L913 BasicCegarLoop]: 244 mSDtfsCounter, 433 mSDsluCounter, 661 mSDsCounter, 0 mSdLazyCounter, 1249 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 433 SdHoareTripleChecker+Valid, 905 SdHoareTripleChecker+Invalid, 1323 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 1249 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:23,158 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [433 Valid, 905 Invalid, 1323 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 1249 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-08 14:47:23,158 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-04-08 14:47:23,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 210. [2022-04-08 14:47:23,528 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:23,528 INFO L82 GeneralOperation]: Start isEquivalent. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-08 14:47:23,529 INFO L74 IsIncluded]: Start isIncluded. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-08 14:47:23,529 INFO L87 Difference]: Start difference. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-08 14:47:23,534 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:23,534 INFO L93 Difference]: Finished difference Result 210 states and 273 transitions. [2022-04-08 14:47:23,534 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-08 14:47:23,535 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:23,535 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:23,535 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) Second operand 210 states. [2022-04-08 14:47:23,536 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) Second operand 210 states. [2022-04-08 14:47:23,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:23,541 INFO L93 Difference]: Finished difference Result 210 states and 273 transitions. [2022-04-08 14:47:23,541 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-08 14:47:23,541 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:23,542 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:23,542 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:23,542 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:23,542 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-08 14:47:23,547 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 273 transitions. [2022-04-08 14:47:23,547 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 273 transitions. Word has length 53 [2022-04-08 14:47:23,547 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:23,547 INFO L478 AbstractCegarLoop]: Abstraction has 210 states and 273 transitions. [2022-04-08 14:47:23,547 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:23,547 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 273 transitions. [2022-04-08 14:47:23,876 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 273 edges. 273 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:23,876 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-08 14:47:23,878 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-04-08 14:47:23,878 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:23,878 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:23,878 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-04-08 14:47:23,878 INFO L403 AbstractCegarLoop]: === Iteration 14 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:23,879 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:23,879 INFO L85 PathProgramCache]: Analyzing trace with hash -438914869, now seen corresponding path program 1 times [2022-04-08 14:47:23,879 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:23,879 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1220729726] [2022-04-08 14:47:23,879 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:23,879 INFO L85 PathProgramCache]: Analyzing trace with hash -438914869, now seen corresponding path program 2 times [2022-04-08 14:47:23,880 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:23,880 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [18005743] [2022-04-08 14:47:23,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:23,880 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:23,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:23,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:23,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:23,955 INFO L290 TraceCheckUtils]: 0: Hoare triple {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-08 14:47:23,955 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-08 14:47:23,955 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #783#return; {24319#true} is VALID [2022-04-08 14:47:23,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:23,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:23,981 INFO L290 TraceCheckUtils]: 0: Hoare triple {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-08 14:47:23,982 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-08 14:47:23,982 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #715#return; {24319#true} is VALID [2022-04-08 14:47:23,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:23,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:23,997 INFO L290 TraceCheckUtils]: 0: Hoare triple {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-08 14:47:23,997 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-08 14:47:23,997 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #717#return; {24319#true} is VALID [2022-04-08 14:47:24,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-08 14:47:24,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:24,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:24,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:24,077 INFO L290 TraceCheckUtils]: 0: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-08 14:47:24,077 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-08 14:47:24,078 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-08 14:47:24,078 INFO L290 TraceCheckUtils]: 3: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-08 14:47:24,078 INFO L290 TraceCheckUtils]: 4: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-08 14:47:24,078 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-08 14:47:24,078 INFO L290 TraceCheckUtils]: 6: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-08 14:47:24,078 INFO L290 TraceCheckUtils]: 7: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 14:47:24,079 INFO L290 TraceCheckUtils]: 8: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,079 INFO L290 TraceCheckUtils]: 9: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,080 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,080 INFO L290 TraceCheckUtils]: 0: Hoare triple {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {24319#true} is VALID [2022-04-08 14:47:24,081 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume !(0 == ~irpStack__MinorFunction~0); {24319#true} is VALID [2022-04-08 14:47:24,081 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} assume 23 == ~irpStack__MinorFunction~0; {24319#true} is VALID [2022-04-08 14:47:24,081 INFO L290 TraceCheckUtils]: 3: Hoare triple {24319#true} ~devExt__SurpriseRemoved~0 := 1; {24319#true} is VALID [2022-04-08 14:47:24,081 INFO L290 TraceCheckUtils]: 4: Hoare triple {24319#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {24319#true} is VALID [2022-04-08 14:47:24,081 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} #t~post12 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post12;havoc #t~post12;#t~post13 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post13;havoc #t~post13; {24319#true} is VALID [2022-04-08 14:47:24,082 INFO L272 TraceCheckUtils]: 6: Hoare triple {24319#true} call #t~ret14 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:24,082 INFO L290 TraceCheckUtils]: 7: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-08 14:47:24,082 INFO L290 TraceCheckUtils]: 8: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-08 14:47:24,082 INFO L290 TraceCheckUtils]: 9: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-08 14:47:24,082 INFO L290 TraceCheckUtils]: 10: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-08 14:47:24,083 INFO L290 TraceCheckUtils]: 11: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-08 14:47:24,083 INFO L290 TraceCheckUtils]: 12: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-08 14:47:24,083 INFO L290 TraceCheckUtils]: 13: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-08 14:47:24,083 INFO L290 TraceCheckUtils]: 14: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 14:47:24,083 INFO L290 TraceCheckUtils]: 15: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,084 INFO L290 TraceCheckUtils]: 16: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,084 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,085 INFO L290 TraceCheckUtils]: 18: Hoare triple {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;~status~0 := #t~ret14;havoc #t~ret14; {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,085 INFO L290 TraceCheckUtils]: 19: Hoare triple {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,086 INFO L290 TraceCheckUtils]: 20: Hoare triple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,086 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {24319#true} #723#return; {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,088 INFO L272 TraceCheckUtils]: 0: Hoare triple {24319#true} call ULTIMATE.init(); {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:24,088 INFO L290 TraceCheckUtils]: 1: Hoare triple {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-08 14:47:24,088 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-08 14:47:24,088 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {24319#true} {24319#true} #783#return; {24319#true} is VALID [2022-04-08 14:47:24,088 INFO L272 TraceCheckUtils]: 4: Hoare triple {24319#true} call #t~ret81 := main(); {24319#true} is VALID [2022-04-08 14:47:24,088 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {24319#true} is VALID [2022-04-08 14:47:24,089 INFO L272 TraceCheckUtils]: 6: Hoare triple {24319#true} call _BLAST_init(); {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:24,089 INFO L290 TraceCheckUtils]: 7: Hoare triple {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-08 14:47:24,089 INFO L290 TraceCheckUtils]: 8: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-08 14:47:24,090 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {24319#true} {24319#true} #715#return; {24319#true} is VALID [2022-04-08 14:47:24,090 INFO L290 TraceCheckUtils]: 10: Hoare triple {24319#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-08 14:47:24,090 INFO L290 TraceCheckUtils]: 11: Hoare triple {24319#true} assume !(0 == ~irp_choice~0); {24319#true} is VALID [2022-04-08 14:47:24,090 INFO L272 TraceCheckUtils]: 12: Hoare triple {24319#true} call stub_driver_init(); {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:24,091 INFO L290 TraceCheckUtils]: 13: Hoare triple {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-08 14:47:24,091 INFO L290 TraceCheckUtils]: 14: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-08 14:47:24,091 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {24319#true} {24319#true} #717#return; {24319#true} is VALID [2022-04-08 14:47:24,091 INFO L290 TraceCheckUtils]: 16: Hoare triple {24319#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {24319#true} is VALID [2022-04-08 14:47:24,091 INFO L290 TraceCheckUtils]: 17: Hoare triple {24319#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {24319#true} is VALID [2022-04-08 14:47:24,091 INFO L290 TraceCheckUtils]: 18: Hoare triple {24319#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {24319#true} is VALID [2022-04-08 14:47:24,091 INFO L290 TraceCheckUtils]: 19: Hoare triple {24319#true} assume 3 == ~tmp_ndt_3~0; {24319#true} is VALID [2022-04-08 14:47:24,092 INFO L272 TraceCheckUtils]: 20: Hoare triple {24319#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:24,092 INFO L290 TraceCheckUtils]: 21: Hoare triple {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {24319#true} is VALID [2022-04-08 14:47:24,092 INFO L290 TraceCheckUtils]: 22: Hoare triple {24319#true} assume !(0 == ~irpStack__MinorFunction~0); {24319#true} is VALID [2022-04-08 14:47:24,092 INFO L290 TraceCheckUtils]: 23: Hoare triple {24319#true} assume 23 == ~irpStack__MinorFunction~0; {24319#true} is VALID [2022-04-08 14:47:24,092 INFO L290 TraceCheckUtils]: 24: Hoare triple {24319#true} ~devExt__SurpriseRemoved~0 := 1; {24319#true} is VALID [2022-04-08 14:47:24,093 INFO L290 TraceCheckUtils]: 25: Hoare triple {24319#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {24319#true} is VALID [2022-04-08 14:47:24,093 INFO L290 TraceCheckUtils]: 26: Hoare triple {24319#true} #t~post12 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post12;havoc #t~post12;#t~post13 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post13;havoc #t~post13; {24319#true} is VALID [2022-04-08 14:47:24,093 INFO L272 TraceCheckUtils]: 27: Hoare triple {24319#true} call #t~ret14 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:24,093 INFO L290 TraceCheckUtils]: 28: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-08 14:47:24,093 INFO L290 TraceCheckUtils]: 29: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-08 14:47:24,094 INFO L290 TraceCheckUtils]: 30: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-08 14:47:24,094 INFO L290 TraceCheckUtils]: 31: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-08 14:47:24,094 INFO L290 TraceCheckUtils]: 32: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-08 14:47:24,094 INFO L290 TraceCheckUtils]: 33: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-08 14:47:24,094 INFO L290 TraceCheckUtils]: 34: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-08 14:47:24,094 INFO L290 TraceCheckUtils]: 35: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 14:47:24,095 INFO L290 TraceCheckUtils]: 36: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,095 INFO L290 TraceCheckUtils]: 37: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,096 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,096 INFO L290 TraceCheckUtils]: 39: Hoare triple {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;~status~0 := #t~ret14;havoc #t~ret14; {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,096 INFO L290 TraceCheckUtils]: 40: Hoare triple {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,097 INFO L290 TraceCheckUtils]: 41: Hoare triple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,097 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {24319#true} #723#return; {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,098 INFO L290 TraceCheckUtils]: 43: Hoare triple {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,098 INFO L290 TraceCheckUtils]: 44: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,098 INFO L290 TraceCheckUtils]: 45: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,099 INFO L290 TraceCheckUtils]: 46: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,099 INFO L290 TraceCheckUtils]: 47: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,099 INFO L290 TraceCheckUtils]: 48: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,100 INFO L290 TraceCheckUtils]: 49: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,100 INFO L290 TraceCheckUtils]: 50: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:24,100 INFO L290 TraceCheckUtils]: 51: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {24320#false} is VALID [2022-04-08 14:47:24,100 INFO L272 TraceCheckUtils]: 52: Hoare triple {24320#false} call errorFn(); {24320#false} is VALID [2022-04-08 14:47:24,100 INFO L290 TraceCheckUtils]: 53: Hoare triple {24320#false} assume !false; {24320#false} is VALID [2022-04-08 14:47:24,101 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:24,101 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:24,101 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [18005743] [2022-04-08 14:47:24,101 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [18005743] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:24,101 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:24,101 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-08 14:47:24,101 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:24,102 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1220729726] [2022-04-08 14:47:24,102 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1220729726] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:24,102 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:24,102 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-08 14:47:24,102 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1800381533] [2022-04-08 14:47:24,102 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:24,102 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 54 [2022-04-08 14:47:24,103 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:24,103 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:24,140 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 54 edges. 54 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:24,140 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-08 14:47:24,141 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:24,142 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-08 14:47:24,142 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-04-08 14:47:24,142 INFO L87 Difference]: Start difference. First operand 210 states and 273 transitions. Second operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:27,143 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:27,143 INFO L93 Difference]: Finished difference Result 226 states and 289 transitions. [2022-04-08 14:47:27,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-08 14:47:27,143 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 54 [2022-04-08 14:47:27,143 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:27,144 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:27,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 265 transitions. [2022-04-08 14:47:27,146 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:27,148 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 265 transitions. [2022-04-08 14:47:27,148 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 265 transitions. [2022-04-08 14:47:27,393 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 265 edges. 265 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:27,397 INFO L225 Difference]: With dead ends: 226 [2022-04-08 14:47:27,397 INFO L226 Difference]: Without dead ends: 205 [2022-04-08 14:47:27,398 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-04-08 14:47:27,398 INFO L913 BasicCegarLoop]: 214 mSDtfsCounter, 246 mSDsluCounter, 625 mSDsCounter, 0 mSdLazyCounter, 1286 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 246 SdHoareTripleChecker+Valid, 839 SdHoareTripleChecker+Invalid, 1337 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 1286 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:27,398 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [246 Valid, 839 Invalid, 1337 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 1286 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-04-08 14:47:27,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2022-04-08 14:47:27,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 205. [2022-04-08 14:47:27,734 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:27,734 INFO L82 GeneralOperation]: Start isEquivalent. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-08 14:47:27,735 INFO L74 IsIncluded]: Start isIncluded. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-08 14:47:27,735 INFO L87 Difference]: Start difference. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-08 14:47:27,738 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:27,738 INFO L93 Difference]: Finished difference Result 205 states and 266 transitions. [2022-04-08 14:47:27,738 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-08 14:47:27,738 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:27,738 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:27,738 INFO L74 IsIncluded]: Start isIncluded. First operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) Second operand 205 states. [2022-04-08 14:47:27,739 INFO L87 Difference]: Start difference. First operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) Second operand 205 states. [2022-04-08 14:47:27,742 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:27,742 INFO L93 Difference]: Finished difference Result 205 states and 266 transitions. [2022-04-08 14:47:27,743 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-08 14:47:27,743 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:27,743 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:27,743 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:27,743 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:27,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-08 14:47:27,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 205 states to 205 states and 266 transitions. [2022-04-08 14:47:27,748 INFO L78 Accepts]: Start accepts. Automaton has 205 states and 266 transitions. Word has length 54 [2022-04-08 14:47:27,748 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:27,748 INFO L478 AbstractCegarLoop]: Abstraction has 205 states and 266 transitions. [2022-04-08 14:47:27,749 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:27,749 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 205 states and 266 transitions. [2022-04-08 14:47:28,151 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 266 edges. 266 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:28,151 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-08 14:47:28,152 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-08 14:47:28,152 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:28,152 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:28,152 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-04-08 14:47:28,152 INFO L403 AbstractCegarLoop]: === Iteration 15 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:28,153 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:28,153 INFO L85 PathProgramCache]: Analyzing trace with hash 432963036, now seen corresponding path program 1 times [2022-04-08 14:47:28,153 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:28,153 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1788600988] [2022-04-08 14:47:28,153 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:28,153 INFO L85 PathProgramCache]: Analyzing trace with hash 432963036, now seen corresponding path program 2 times [2022-04-08 14:47:28,153 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:28,154 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [896831012] [2022-04-08 14:47:28,154 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:28,154 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:28,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:28,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:28,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:28,240 INFO L290 TraceCheckUtils]: 0: Hoare triple {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-08 14:47:28,240 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 14:47:28,240 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #783#return; {25653#true} is VALID [2022-04-08 14:47:28,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:28,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:28,266 INFO L290 TraceCheckUtils]: 0: Hoare triple {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-08 14:47:28,266 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 14:47:28,266 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #715#return; {25653#true} is VALID [2022-04-08 14:47:28,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:28,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:28,282 INFO L290 TraceCheckUtils]: 0: Hoare triple {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-08 14:47:28,282 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 14:47:28,282 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #717#return; {25653#true} is VALID [2022-04-08 14:47:28,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-08 14:47:28,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:28,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-08 14:47:28,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:28,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-08 14:47:28,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:28,368 INFO L290 TraceCheckUtils]: 0: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-08 14:47:28,368 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 14:47:28,368 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-08 14:47:28,368 INFO L290 TraceCheckUtils]: 0: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-08 14:47:28,369 INFO L272 TraceCheckUtils]: 1: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:28,369 INFO L290 TraceCheckUtils]: 2: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-08 14:47:28,369 INFO L290 TraceCheckUtils]: 3: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 14:47:28,369 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-08 14:47:28,369 INFO L290 TraceCheckUtils]: 5: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-08 14:47:28,369 INFO L290 TraceCheckUtils]: 6: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 14:47:28,369 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-08 14:47:28,370 INFO L290 TraceCheckUtils]: 0: Hoare triple {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {25653#true} is VALID [2022-04-08 14:47:28,370 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume 0 != ~compRegistered~0; {25653#true} is VALID [2022-04-08 14:47:28,371 INFO L272 TraceCheckUtils]: 2: Hoare triple {25653#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:28,371 INFO L290 TraceCheckUtils]: 3: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-08 14:47:28,371 INFO L272 TraceCheckUtils]: 4: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:28,371 INFO L290 TraceCheckUtils]: 5: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-08 14:47:28,372 INFO L290 TraceCheckUtils]: 6: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 14:47:28,372 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-08 14:47:28,372 INFO L290 TraceCheckUtils]: 8: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-08 14:47:28,372 INFO L290 TraceCheckUtils]: 9: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 14:47:28,372 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-08 14:47:28,372 INFO L290 TraceCheckUtils]: 11: Hoare triple {25653#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {25653#true} is VALID [2022-04-08 14:47:28,372 INFO L290 TraceCheckUtils]: 12: Hoare triple {25653#true} assume !(-1073741802 == ~__cil_tmp7~0); {25653#true} is VALID [2022-04-08 14:47:28,372 INFO L290 TraceCheckUtils]: 13: Hoare triple {25653#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {25653#true} is VALID [2022-04-08 14:47:28,373 INFO L290 TraceCheckUtils]: 14: Hoare triple {25653#true} assume 0 == ~tmp_ndt_6~0; {25653#true} is VALID [2022-04-08 14:47:28,373 INFO L290 TraceCheckUtils]: 15: Hoare triple {25653#true} ~returnVal2~0 := 0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:28,373 INFO L290 TraceCheckUtils]: 16: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:28,374 INFO L290 TraceCheckUtils]: 17: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 14:47:28,374 INFO L290 TraceCheckUtils]: 18: Hoare triple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 14:47:28,375 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {25653#true} #755#return; {25684#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-08 14:47:28,376 INFO L272 TraceCheckUtils]: 0: Hoare triple {25653#true} call ULTIMATE.init(); {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:28,377 INFO L290 TraceCheckUtils]: 1: Hoare triple {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-08 14:47:28,377 INFO L290 TraceCheckUtils]: 2: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 14:47:28,377 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {25653#true} {25653#true} #783#return; {25653#true} is VALID [2022-04-08 14:47:28,377 INFO L272 TraceCheckUtils]: 4: Hoare triple {25653#true} call #t~ret81 := main(); {25653#true} is VALID [2022-04-08 14:47:28,377 INFO L290 TraceCheckUtils]: 5: Hoare triple {25653#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {25653#true} is VALID [2022-04-08 14:47:28,378 INFO L272 TraceCheckUtils]: 6: Hoare triple {25653#true} call _BLAST_init(); {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:28,378 INFO L290 TraceCheckUtils]: 7: Hoare triple {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-08 14:47:28,378 INFO L290 TraceCheckUtils]: 8: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 14:47:28,379 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {25653#true} {25653#true} #715#return; {25653#true} is VALID [2022-04-08 14:47:28,379 INFO L290 TraceCheckUtils]: 10: Hoare triple {25653#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-08 14:47:28,379 INFO L290 TraceCheckUtils]: 11: Hoare triple {25653#true} assume !(0 == ~irp_choice~0); {25653#true} is VALID [2022-04-08 14:47:28,379 INFO L272 TraceCheckUtils]: 12: Hoare triple {25653#true} call stub_driver_init(); {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:28,380 INFO L290 TraceCheckUtils]: 13: Hoare triple {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-08 14:47:28,380 INFO L290 TraceCheckUtils]: 14: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 14:47:28,380 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {25653#true} {25653#true} #717#return; {25653#true} is VALID [2022-04-08 14:47:28,380 INFO L290 TraceCheckUtils]: 16: Hoare triple {25653#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {25653#true} is VALID [2022-04-08 14:47:28,380 INFO L290 TraceCheckUtils]: 17: Hoare triple {25653#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {25653#true} is VALID [2022-04-08 14:47:28,380 INFO L290 TraceCheckUtils]: 18: Hoare triple {25653#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {25653#true} is VALID [2022-04-08 14:47:28,380 INFO L290 TraceCheckUtils]: 19: Hoare triple {25653#true} assume 3 == ~tmp_ndt_3~0; {25653#true} is VALID [2022-04-08 14:47:28,380 INFO L272 TraceCheckUtils]: 20: Hoare triple {25653#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {25653#true} is VALID [2022-04-08 14:47:28,381 INFO L290 TraceCheckUtils]: 21: Hoare triple {25653#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {25653#true} is VALID [2022-04-08 14:47:28,381 INFO L290 TraceCheckUtils]: 22: Hoare triple {25653#true} assume 0 == ~irpStack__MinorFunction~0; {25653#true} is VALID [2022-04-08 14:47:28,381 INFO L290 TraceCheckUtils]: 23: Hoare triple {25653#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {25653#true} is VALID [2022-04-08 14:47:28,381 INFO L290 TraceCheckUtils]: 24: Hoare triple {25653#true} assume !(~s~0 != ~NP~0); {25653#true} is VALID [2022-04-08 14:47:28,381 INFO L290 TraceCheckUtils]: 25: Hoare triple {25653#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {25653#true} is VALID [2022-04-08 14:47:28,381 INFO L290 TraceCheckUtils]: 26: Hoare triple {25653#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {25653#true} is VALID [2022-04-08 14:47:28,382 INFO L272 TraceCheckUtils]: 27: Hoare triple {25653#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:28,382 INFO L290 TraceCheckUtils]: 28: Hoare triple {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {25653#true} is VALID [2022-04-08 14:47:28,382 INFO L290 TraceCheckUtils]: 29: Hoare triple {25653#true} assume 0 != ~compRegistered~0; {25653#true} is VALID [2022-04-08 14:47:28,383 INFO L272 TraceCheckUtils]: 30: Hoare triple {25653#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:28,383 INFO L290 TraceCheckUtils]: 31: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-08 14:47:28,383 INFO L272 TraceCheckUtils]: 32: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:28,384 INFO L290 TraceCheckUtils]: 33: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-08 14:47:28,384 INFO L290 TraceCheckUtils]: 34: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 14:47:28,384 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-08 14:47:28,384 INFO L290 TraceCheckUtils]: 36: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-08 14:47:28,384 INFO L290 TraceCheckUtils]: 37: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-08 14:47:28,384 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-08 14:47:28,384 INFO L290 TraceCheckUtils]: 39: Hoare triple {25653#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {25653#true} is VALID [2022-04-08 14:47:28,384 INFO L290 TraceCheckUtils]: 40: Hoare triple {25653#true} assume !(-1073741802 == ~__cil_tmp7~0); {25653#true} is VALID [2022-04-08 14:47:28,385 INFO L290 TraceCheckUtils]: 41: Hoare triple {25653#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {25653#true} is VALID [2022-04-08 14:47:28,385 INFO L290 TraceCheckUtils]: 42: Hoare triple {25653#true} assume 0 == ~tmp_ndt_6~0; {25653#true} is VALID [2022-04-08 14:47:28,385 INFO L290 TraceCheckUtils]: 43: Hoare triple {25653#true} ~returnVal2~0 := 0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:28,385 INFO L290 TraceCheckUtils]: 44: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:28,386 INFO L290 TraceCheckUtils]: 45: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 14:47:28,386 INFO L290 TraceCheckUtils]: 46: Hoare triple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 14:47:28,387 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {25653#true} #755#return; {25684#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-08 14:47:28,387 INFO L290 TraceCheckUtils]: 48: Hoare triple {25684#(= |KbFilter_PnP_#t~ret10| 0)} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {25685#(= KbFilter_PnP_~__cil_tmp23~0 0)} is VALID [2022-04-08 14:47:28,388 INFO L290 TraceCheckUtils]: 49: Hoare triple {25685#(= KbFilter_PnP_~__cil_tmp23~0 0)} assume 259 == ~__cil_tmp23~0; {25654#false} is VALID [2022-04-08 14:47:28,388 INFO L272 TraceCheckUtils]: 50: Hoare triple {25654#false} call #t~ret11 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {25654#false} is VALID [2022-04-08 14:47:28,388 INFO L290 TraceCheckUtils]: 51: Hoare triple {25654#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {25654#false} is VALID [2022-04-08 14:47:28,388 INFO L290 TraceCheckUtils]: 52: Hoare triple {25654#false} assume !(~s~0 == ~MPR3~0); {25654#false} is VALID [2022-04-08 14:47:28,388 INFO L290 TraceCheckUtils]: 53: Hoare triple {25654#false} assume !(1 == ~customIrp~0); {25654#false} is VALID [2022-04-08 14:47:28,388 INFO L290 TraceCheckUtils]: 54: Hoare triple {25654#false} assume ~s~0 == ~MPR3~0; {25654#false} is VALID [2022-04-08 14:47:28,388 INFO L272 TraceCheckUtils]: 55: Hoare triple {25654#false} call errorFn(); {25654#false} is VALID [2022-04-08 14:47:28,389 INFO L290 TraceCheckUtils]: 56: Hoare triple {25654#false} assume !false; {25654#false} is VALID [2022-04-08 14:47:28,389 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:28,389 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:28,389 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [896831012] [2022-04-08 14:47:28,389 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [896831012] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:28,389 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:28,389 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-08 14:47:28,390 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:28,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1788600988] [2022-04-08 14:47:28,390 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1788600988] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:28,390 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:28,390 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-08 14:47:28,390 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1065628846] [2022-04-08 14:47:28,390 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:28,391 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-08 14:47:28,391 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:28,391 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:28,431 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:28,431 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-08 14:47:28,431 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:28,431 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-08 14:47:28,432 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-08 14:47:28,432 INFO L87 Difference]: Start difference. First operand 205 states and 266 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:30,740 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:30,740 INFO L93 Difference]: Finished difference Result 263 states and 337 transitions. [2022-04-08 14:47:30,740 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-08 14:47:30,741 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-08 14:47:30,741 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:30,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:30,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 302 transitions. [2022-04-08 14:47:30,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:30,745 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 302 transitions. [2022-04-08 14:47:30,746 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 302 transitions. [2022-04-08 14:47:31,081 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 302 edges. 302 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:31,084 INFO L225 Difference]: With dead ends: 263 [2022-04-08 14:47:31,084 INFO L226 Difference]: Without dead ends: 222 [2022-04-08 14:47:31,085 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-04-08 14:47:31,085 INFO L913 BasicCegarLoop]: 203 mSDtfsCounter, 155 mSDsluCounter, 448 mSDsCounter, 0 mSdLazyCounter, 796 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 651 SdHoareTripleChecker+Invalid, 837 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 796 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:31,086 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [155 Valid, 651 Invalid, 837 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 796 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-08 14:47:31,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2022-04-08 14:47:31,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 210. [2022-04-08 14:47:31,467 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:31,467 INFO L82 GeneralOperation]: Start isEquivalent. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 14:47:31,467 INFO L74 IsIncluded]: Start isIncluded. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 14:47:31,467 INFO L87 Difference]: Start difference. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 14:47:31,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:31,471 INFO L93 Difference]: Finished difference Result 222 states and 287 transitions. [2022-04-08 14:47:31,471 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 287 transitions. [2022-04-08 14:47:31,471 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:31,471 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:31,471 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 222 states. [2022-04-08 14:47:31,472 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 222 states. [2022-04-08 14:47:31,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:31,476 INFO L93 Difference]: Finished difference Result 222 states and 287 transitions. [2022-04-08 14:47:31,476 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 287 transitions. [2022-04-08 14:47:31,476 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:31,476 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:31,476 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:31,476 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:31,477 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 14:47:31,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 271 transitions. [2022-04-08 14:47:31,482 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 271 transitions. Word has length 57 [2022-04-08 14:47:31,482 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:31,482 INFO L478 AbstractCegarLoop]: Abstraction has 210 states and 271 transitions. [2022-04-08 14:47:31,482 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:31,482 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 271 transitions. [2022-04-08 14:47:31,901 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 271 edges. 271 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:31,901 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 271 transitions. [2022-04-08 14:47:31,901 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-08 14:47:31,902 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:31,902 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:31,902 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-04-08 14:47:31,902 INFO L403 AbstractCegarLoop]: === Iteration 16 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:31,902 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:31,902 INFO L85 PathProgramCache]: Analyzing trace with hash 1039954733, now seen corresponding path program 1 times [2022-04-08 14:47:31,902 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:31,902 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1897889806] [2022-04-08 14:47:31,903 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:31,903 INFO L85 PathProgramCache]: Analyzing trace with hash 1039954733, now seen corresponding path program 2 times [2022-04-08 14:47:31,903 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:31,903 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1404470091] [2022-04-08 14:47:31,903 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:31,903 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:31,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:31,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:31,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:31,983 INFO L290 TraceCheckUtils]: 0: Hoare triple {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-08 14:47:31,983 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 14:47:31,983 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #783#return; {27104#true} is VALID [2022-04-08 14:47:32,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:32,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:32,016 INFO L290 TraceCheckUtils]: 0: Hoare triple {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-08 14:47:32,016 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 14:47:32,016 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #715#return; {27104#true} is VALID [2022-04-08 14:47:32,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:32,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:32,032 INFO L290 TraceCheckUtils]: 0: Hoare triple {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-08 14:47:32,032 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 14:47:32,032 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #717#return; {27104#true} is VALID [2022-04-08 14:47:32,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-08 14:47:32,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:32,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-08 14:47:32,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:32,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-08 14:47:32,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:32,097 INFO L290 TraceCheckUtils]: 0: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-08 14:47:32,097 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 14:47:32,097 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-08 14:47:32,097 INFO L290 TraceCheckUtils]: 0: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-08 14:47:32,098 INFO L272 TraceCheckUtils]: 1: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:32,098 INFO L290 TraceCheckUtils]: 2: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-08 14:47:32,098 INFO L290 TraceCheckUtils]: 3: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 14:47:32,098 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-08 14:47:32,098 INFO L290 TraceCheckUtils]: 5: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-08 14:47:32,098 INFO L290 TraceCheckUtils]: 6: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 14:47:32,098 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-08 14:47:32,099 INFO L290 TraceCheckUtils]: 0: Hoare triple {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {27104#true} is VALID [2022-04-08 14:47:32,099 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume 0 != ~compRegistered~0; {27104#true} is VALID [2022-04-08 14:47:32,099 INFO L272 TraceCheckUtils]: 2: Hoare triple {27104#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:32,099 INFO L290 TraceCheckUtils]: 3: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-08 14:47:32,100 INFO L272 TraceCheckUtils]: 4: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:32,100 INFO L290 TraceCheckUtils]: 5: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-08 14:47:32,100 INFO L290 TraceCheckUtils]: 6: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 14:47:32,100 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-08 14:47:32,100 INFO L290 TraceCheckUtils]: 8: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-08 14:47:32,101 INFO L290 TraceCheckUtils]: 9: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 14:47:32,101 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-08 14:47:32,101 INFO L290 TraceCheckUtils]: 11: Hoare triple {27104#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {27104#true} is VALID [2022-04-08 14:47:32,101 INFO L290 TraceCheckUtils]: 12: Hoare triple {27104#true} assume !(-1073741802 == ~__cil_tmp7~0); {27104#true} is VALID [2022-04-08 14:47:32,101 INFO L290 TraceCheckUtils]: 13: Hoare triple {27104#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {27104#true} is VALID [2022-04-08 14:47:32,101 INFO L290 TraceCheckUtils]: 14: Hoare triple {27104#true} assume 0 == ~tmp_ndt_6~0; {27104#true} is VALID [2022-04-08 14:47:32,101 INFO L290 TraceCheckUtils]: 15: Hoare triple {27104#true} ~returnVal2~0 := 0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:32,102 INFO L290 TraceCheckUtils]: 16: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:32,102 INFO L290 TraceCheckUtils]: 17: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 14:47:32,103 INFO L290 TraceCheckUtils]: 18: Hoare triple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 14:47:32,103 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {27104#true} #755#return; {27135#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-08 14:47:32,105 INFO L272 TraceCheckUtils]: 0: Hoare triple {27104#true} call ULTIMATE.init(); {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:32,105 INFO L290 TraceCheckUtils]: 1: Hoare triple {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-08 14:47:32,105 INFO L290 TraceCheckUtils]: 2: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 14:47:32,105 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {27104#true} {27104#true} #783#return; {27104#true} is VALID [2022-04-08 14:47:32,105 INFO L272 TraceCheckUtils]: 4: Hoare triple {27104#true} call #t~ret81 := main(); {27104#true} is VALID [2022-04-08 14:47:32,105 INFO L290 TraceCheckUtils]: 5: Hoare triple {27104#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {27104#true} is VALID [2022-04-08 14:47:32,106 INFO L272 TraceCheckUtils]: 6: Hoare triple {27104#true} call _BLAST_init(); {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:32,106 INFO L290 TraceCheckUtils]: 7: Hoare triple {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-08 14:47:32,107 INFO L290 TraceCheckUtils]: 8: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 14:47:32,107 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {27104#true} {27104#true} #715#return; {27104#true} is VALID [2022-04-08 14:47:32,107 INFO L290 TraceCheckUtils]: 10: Hoare triple {27104#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-08 14:47:32,107 INFO L290 TraceCheckUtils]: 11: Hoare triple {27104#true} assume !(0 == ~irp_choice~0); {27104#true} is VALID [2022-04-08 14:47:32,108 INFO L272 TraceCheckUtils]: 12: Hoare triple {27104#true} call stub_driver_init(); {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:32,108 INFO L290 TraceCheckUtils]: 13: Hoare triple {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-08 14:47:32,108 INFO L290 TraceCheckUtils]: 14: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 14:47:32,108 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {27104#true} {27104#true} #717#return; {27104#true} is VALID [2022-04-08 14:47:32,108 INFO L290 TraceCheckUtils]: 16: Hoare triple {27104#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {27104#true} is VALID [2022-04-08 14:47:32,108 INFO L290 TraceCheckUtils]: 17: Hoare triple {27104#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {27104#true} is VALID [2022-04-08 14:47:32,108 INFO L290 TraceCheckUtils]: 18: Hoare triple {27104#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {27104#true} is VALID [2022-04-08 14:47:32,108 INFO L290 TraceCheckUtils]: 19: Hoare triple {27104#true} assume 3 == ~tmp_ndt_3~0; {27104#true} is VALID [2022-04-08 14:47:32,108 INFO L272 TraceCheckUtils]: 20: Hoare triple {27104#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {27104#true} is VALID [2022-04-08 14:47:32,108 INFO L290 TraceCheckUtils]: 21: Hoare triple {27104#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {27104#true} is VALID [2022-04-08 14:47:32,109 INFO L290 TraceCheckUtils]: 22: Hoare triple {27104#true} assume 0 == ~irpStack__MinorFunction~0; {27104#true} is VALID [2022-04-08 14:47:32,109 INFO L290 TraceCheckUtils]: 23: Hoare triple {27104#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {27104#true} is VALID [2022-04-08 14:47:32,109 INFO L290 TraceCheckUtils]: 24: Hoare triple {27104#true} assume !(~s~0 != ~NP~0); {27104#true} is VALID [2022-04-08 14:47:32,109 INFO L290 TraceCheckUtils]: 25: Hoare triple {27104#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {27104#true} is VALID [2022-04-08 14:47:32,109 INFO L290 TraceCheckUtils]: 26: Hoare triple {27104#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {27104#true} is VALID [2022-04-08 14:47:32,110 INFO L272 TraceCheckUtils]: 27: Hoare triple {27104#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:32,110 INFO L290 TraceCheckUtils]: 28: Hoare triple {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {27104#true} is VALID [2022-04-08 14:47:32,110 INFO L290 TraceCheckUtils]: 29: Hoare triple {27104#true} assume 0 != ~compRegistered~0; {27104#true} is VALID [2022-04-08 14:47:32,110 INFO L272 TraceCheckUtils]: 30: Hoare triple {27104#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:32,111 INFO L290 TraceCheckUtils]: 31: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-08 14:47:32,111 INFO L272 TraceCheckUtils]: 32: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:32,111 INFO L290 TraceCheckUtils]: 33: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-08 14:47:32,111 INFO L290 TraceCheckUtils]: 34: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 14:47:32,111 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-08 14:47:32,111 INFO L290 TraceCheckUtils]: 36: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-08 14:47:32,112 INFO L290 TraceCheckUtils]: 37: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-08 14:47:32,112 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-08 14:47:32,112 INFO L290 TraceCheckUtils]: 39: Hoare triple {27104#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {27104#true} is VALID [2022-04-08 14:47:32,112 INFO L290 TraceCheckUtils]: 40: Hoare triple {27104#true} assume !(-1073741802 == ~__cil_tmp7~0); {27104#true} is VALID [2022-04-08 14:47:32,112 INFO L290 TraceCheckUtils]: 41: Hoare triple {27104#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {27104#true} is VALID [2022-04-08 14:47:32,112 INFO L290 TraceCheckUtils]: 42: Hoare triple {27104#true} assume 0 == ~tmp_ndt_6~0; {27104#true} is VALID [2022-04-08 14:47:32,112 INFO L290 TraceCheckUtils]: 43: Hoare triple {27104#true} ~returnVal2~0 := 0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:32,113 INFO L290 TraceCheckUtils]: 44: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:32,113 INFO L290 TraceCheckUtils]: 45: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 14:47:32,114 INFO L290 TraceCheckUtils]: 46: Hoare triple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-08 14:47:32,114 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {27104#true} #755#return; {27135#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-08 14:47:32,115 INFO L290 TraceCheckUtils]: 48: Hoare triple {27135#(= |KbFilter_PnP_#t~ret10| 0)} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {27136#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-08 14:47:32,115 INFO L290 TraceCheckUtils]: 49: Hoare triple {27136#(= KbFilter_PnP_~status~0 0)} assume !(259 == ~__cil_tmp23~0); {27136#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-08 14:47:32,115 INFO L290 TraceCheckUtils]: 50: Hoare triple {27136#(= KbFilter_PnP_~status~0 0)} assume !(~status~0 >= 0); {27105#false} is VALID [2022-04-08 14:47:32,115 INFO L290 TraceCheckUtils]: 51: Hoare triple {27105#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {27105#false} is VALID [2022-04-08 14:47:32,116 INFO L272 TraceCheckUtils]: 52: Hoare triple {27105#false} call IofCompleteRequest(~Irp, 0); {27105#false} is VALID [2022-04-08 14:47:32,116 INFO L290 TraceCheckUtils]: 53: Hoare triple {27105#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {27105#false} is VALID [2022-04-08 14:47:32,116 INFO L290 TraceCheckUtils]: 54: Hoare triple {27105#false} assume !(~s~0 == ~NP~0); {27105#false} is VALID [2022-04-08 14:47:32,116 INFO L272 TraceCheckUtils]: 55: Hoare triple {27105#false} call errorFn(); {27105#false} is VALID [2022-04-08 14:47:32,116 INFO L290 TraceCheckUtils]: 56: Hoare triple {27105#false} assume !false; {27105#false} is VALID [2022-04-08 14:47:32,116 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:32,116 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:32,116 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1404470091] [2022-04-08 14:47:32,117 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1404470091] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:32,117 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:32,117 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-08 14:47:32,117 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:32,117 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1897889806] [2022-04-08 14:47:32,117 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1897889806] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:32,117 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:32,117 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-08 14:47:32,117 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [140623277] [2022-04-08 14:47:32,117 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:32,118 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-08 14:47:32,118 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:32,118 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:32,156 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:32,156 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-08 14:47:32,156 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:32,157 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-08 14:47:32,157 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-08 14:47:32,157 INFO L87 Difference]: Start difference. First operand 210 states and 271 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:34,534 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:34,535 INFO L93 Difference]: Finished difference Result 230 states and 294 transitions. [2022-04-08 14:47:34,535 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-04-08 14:47:34,535 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-08 14:47:34,535 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:34,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:34,538 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 273 transitions. [2022-04-08 14:47:34,538 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:34,540 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 273 transitions. [2022-04-08 14:47:34,540 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 15 states and 273 transitions. [2022-04-08 14:47:34,841 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 273 edges. 273 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:34,846 INFO L225 Difference]: With dead ends: 230 [2022-04-08 14:47:34,846 INFO L226 Difference]: Without dead ends: 223 [2022-04-08 14:47:34,846 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=77, Invalid=265, Unknown=0, NotChecked=0, Total=342 [2022-04-08 14:47:34,848 INFO L913 BasicCegarLoop]: 202 mSDtfsCounter, 320 mSDsluCounter, 412 mSDsCounter, 0 mSdLazyCounter, 702 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 320 SdHoareTripleChecker+Valid, 614 SdHoareTripleChecker+Invalid, 775 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 702 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:34,848 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [320 Valid, 614 Invalid, 775 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 702 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-08 14:47:34,851 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2022-04-08 14:47:35,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 211. [2022-04-08 14:47:35,281 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:35,281 INFO L82 GeneralOperation]: Start isEquivalent. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 14:47:35,281 INFO L74 IsIncluded]: Start isIncluded. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 14:47:35,281 INFO L87 Difference]: Start difference. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 14:47:35,285 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:35,285 INFO L93 Difference]: Finished difference Result 223 states and 287 transitions. [2022-04-08 14:47:35,285 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 287 transitions. [2022-04-08 14:47:35,285 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:35,285 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:35,285 INFO L74 IsIncluded]: Start isIncluded. First operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 223 states. [2022-04-08 14:47:35,286 INFO L87 Difference]: Start difference. First operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 223 states. [2022-04-08 14:47:35,289 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:35,289 INFO L93 Difference]: Finished difference Result 223 states and 287 transitions. [2022-04-08 14:47:35,289 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 287 transitions. [2022-04-08 14:47:35,289 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:35,289 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:35,289 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:35,289 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:35,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 14:47:35,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 272 transitions. [2022-04-08 14:47:35,295 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 272 transitions. Word has length 57 [2022-04-08 14:47:35,295 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:35,295 INFO L478 AbstractCegarLoop]: Abstraction has 211 states and 272 transitions. [2022-04-08 14:47:35,295 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:35,295 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 211 states and 272 transitions. [2022-04-08 14:47:35,702 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 272 edges. 272 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:35,703 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 272 transitions. [2022-04-08 14:47:35,703 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-04-08 14:47:35,704 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:35,704 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:35,704 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-04-08 14:47:35,704 INFO L403 AbstractCegarLoop]: === Iteration 17 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:35,704 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:35,704 INFO L85 PathProgramCache]: Analyzing trace with hash -722543360, now seen corresponding path program 1 times [2022-04-08 14:47:35,704 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:35,705 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [361369419] [2022-04-08 14:47:35,705 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:35,705 INFO L85 PathProgramCache]: Analyzing trace with hash -722543360, now seen corresponding path program 2 times [2022-04-08 14:47:35,705 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:35,705 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [129177789] [2022-04-08 14:47:35,705 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:35,705 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:35,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:35,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:35,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:35,796 INFO L290 TraceCheckUtils]: 0: Hoare triple {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-08 14:47:35,797 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 14:47:35,797 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #783#return; {28502#true} is VALID [2022-04-08 14:47:35,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:35,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:35,820 INFO L290 TraceCheckUtils]: 0: Hoare triple {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-08 14:47:35,820 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 14:47:35,820 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #715#return; {28502#true} is VALID [2022-04-08 14:47:35,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:35,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:35,833 INFO L290 TraceCheckUtils]: 0: Hoare triple {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-08 14:47:35,833 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 14:47:35,833 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #717#return; {28502#true} is VALID [2022-04-08 14:47:35,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-08 14:47:35,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:35,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-08 14:47:35,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:35,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-08 14:47:35,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:35,888 INFO L290 TraceCheckUtils]: 0: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-08 14:47:35,888 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-08 14:47:35,888 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-08 14:47:35,888 INFO L290 TraceCheckUtils]: 3: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-08 14:47:35,888 INFO L290 TraceCheckUtils]: 4: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-08 14:47:35,888 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-08 14:47:35,888 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-08 14:47:35,889 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-08 14:47:35,889 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-08 14:47:35,889 INFO L290 TraceCheckUtils]: 9: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 14:47:35,889 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-08 14:47:35,889 INFO L290 TraceCheckUtils]: 0: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-08 14:47:35,889 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-08 14:47:35,889 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-08 14:47:35,890 INFO L272 TraceCheckUtils]: 3: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:35,890 INFO L290 TraceCheckUtils]: 4: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-08 14:47:35,890 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-08 14:47:35,890 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-08 14:47:35,891 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-08 14:47:35,891 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-08 14:47:35,891 INFO L290 TraceCheckUtils]: 9: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-08 14:47:35,891 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-08 14:47:35,891 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-08 14:47:35,891 INFO L290 TraceCheckUtils]: 12: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-08 14:47:35,891 INFO L290 TraceCheckUtils]: 13: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 14:47:35,891 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-08 14:47:35,891 INFO L290 TraceCheckUtils]: 15: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-08 14:47:35,892 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 14:47:35,892 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-08 14:47:35,892 INFO L290 TraceCheckUtils]: 0: Hoare triple {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {28502#true} is VALID [2022-04-08 14:47:35,892 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {28502#true} is VALID [2022-04-08 14:47:35,896 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} is VALID [2022-04-08 14:47:35,896 INFO L290 TraceCheckUtils]: 3: Hoare triple {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} assume !(~status~3 < 0); {28503#false} is VALID [2022-04-08 14:47:35,896 INFO L272 TraceCheckUtils]: 4: Hoare triple {28503#false} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:35,896 INFO L290 TraceCheckUtils]: 5: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-08 14:47:35,896 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-08 14:47:35,897 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-08 14:47:35,897 INFO L272 TraceCheckUtils]: 8: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:35,897 INFO L290 TraceCheckUtils]: 9: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-08 14:47:35,897 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-08 14:47:35,898 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-08 14:47:35,898 INFO L290 TraceCheckUtils]: 12: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-08 14:47:35,898 INFO L290 TraceCheckUtils]: 13: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-08 14:47:35,898 INFO L290 TraceCheckUtils]: 14: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-08 14:47:35,898 INFO L290 TraceCheckUtils]: 15: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-08 14:47:35,898 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-08 14:47:35,898 INFO L290 TraceCheckUtils]: 17: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-08 14:47:35,898 INFO L290 TraceCheckUtils]: 18: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 14:47:35,898 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-08 14:47:35,898 INFO L290 TraceCheckUtils]: 20: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-08 14:47:35,899 INFO L290 TraceCheckUtils]: 21: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 14:47:35,899 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-08 14:47:35,899 INFO L290 TraceCheckUtils]: 23: Hoare triple {28503#false} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {28503#false} is VALID [2022-04-08 14:47:35,899 INFO L290 TraceCheckUtils]: 24: Hoare triple {28503#false} assume true; {28503#false} is VALID [2022-04-08 14:47:35,899 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {28503#false} {28502#true} #727#return; {28503#false} is VALID [2022-04-08 14:47:35,900 INFO L272 TraceCheckUtils]: 0: Hoare triple {28502#true} call ULTIMATE.init(); {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:35,900 INFO L290 TraceCheckUtils]: 1: Hoare triple {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-08 14:47:35,901 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 14:47:35,901 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {28502#true} {28502#true} #783#return; {28502#true} is VALID [2022-04-08 14:47:35,901 INFO L272 TraceCheckUtils]: 4: Hoare triple {28502#true} call #t~ret81 := main(); {28502#true} is VALID [2022-04-08 14:47:35,901 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {28502#true} is VALID [2022-04-08 14:47:35,902 INFO L272 TraceCheckUtils]: 6: Hoare triple {28502#true} call _BLAST_init(); {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:35,902 INFO L290 TraceCheckUtils]: 7: Hoare triple {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-08 14:47:35,902 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 14:47:35,902 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {28502#true} {28502#true} #715#return; {28502#true} is VALID [2022-04-08 14:47:35,902 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-08 14:47:35,902 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} assume !(0 == ~irp_choice~0); {28502#true} is VALID [2022-04-08 14:47:35,903 INFO L272 TraceCheckUtils]: 12: Hoare triple {28502#true} call stub_driver_init(); {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:35,903 INFO L290 TraceCheckUtils]: 13: Hoare triple {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-08 14:47:35,903 INFO L290 TraceCheckUtils]: 14: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 14:47:35,903 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {28502#true} {28502#true} #717#return; {28502#true} is VALID [2022-04-08 14:47:35,903 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {28502#true} is VALID [2022-04-08 14:47:35,903 INFO L290 TraceCheckUtils]: 17: Hoare triple {28502#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {28502#true} is VALID [2022-04-08 14:47:35,904 INFO L290 TraceCheckUtils]: 18: Hoare triple {28502#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {28502#true} is VALID [2022-04-08 14:47:35,904 INFO L290 TraceCheckUtils]: 19: Hoare triple {28502#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {28502#true} is VALID [2022-04-08 14:47:35,904 INFO L290 TraceCheckUtils]: 20: Hoare triple {28502#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {28502#true} is VALID [2022-04-08 14:47:35,904 INFO L290 TraceCheckUtils]: 21: Hoare triple {28502#true} assume 8 == ~tmp_ndt_5~0; {28502#true} is VALID [2022-04-08 14:47:35,905 INFO L272 TraceCheckUtils]: 22: Hoare triple {28502#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:35,905 INFO L290 TraceCheckUtils]: 23: Hoare triple {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {28502#true} is VALID [2022-04-08 14:47:35,905 INFO L290 TraceCheckUtils]: 24: Hoare triple {28502#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {28502#true} is VALID [2022-04-08 14:47:35,905 INFO L290 TraceCheckUtils]: 25: Hoare triple {28502#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} is VALID [2022-04-08 14:47:35,906 INFO L290 TraceCheckUtils]: 26: Hoare triple {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} assume !(~status~3 < 0); {28503#false} is VALID [2022-04-08 14:47:35,906 INFO L272 TraceCheckUtils]: 27: Hoare triple {28503#false} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:35,906 INFO L290 TraceCheckUtils]: 28: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-08 14:47:35,906 INFO L290 TraceCheckUtils]: 29: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-08 14:47:35,906 INFO L290 TraceCheckUtils]: 30: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-08 14:47:35,907 INFO L272 TraceCheckUtils]: 31: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:35,907 INFO L290 TraceCheckUtils]: 32: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-08 14:47:35,907 INFO L290 TraceCheckUtils]: 33: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-08 14:47:35,907 INFO L290 TraceCheckUtils]: 34: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-08 14:47:35,907 INFO L290 TraceCheckUtils]: 35: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-08 14:47:35,907 INFO L290 TraceCheckUtils]: 36: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-08 14:47:35,907 INFO L290 TraceCheckUtils]: 37: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-08 14:47:35,907 INFO L290 TraceCheckUtils]: 38: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-08 14:47:35,907 INFO L290 TraceCheckUtils]: 39: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-08 14:47:35,907 INFO L290 TraceCheckUtils]: 40: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-08 14:47:35,908 INFO L290 TraceCheckUtils]: 41: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 14:47:35,908 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-08 14:47:35,908 INFO L290 TraceCheckUtils]: 43: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-08 14:47:35,908 INFO L290 TraceCheckUtils]: 44: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-08 14:47:35,908 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-08 14:47:35,908 INFO L290 TraceCheckUtils]: 46: Hoare triple {28503#false} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {28503#false} is VALID [2022-04-08 14:47:35,908 INFO L290 TraceCheckUtils]: 47: Hoare triple {28503#false} assume true; {28503#false} is VALID [2022-04-08 14:47:35,908 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {28503#false} {28502#true} #727#return; {28503#false} is VALID [2022-04-08 14:47:35,908 INFO L290 TraceCheckUtils]: 49: Hoare triple {28503#false} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {28503#false} is VALID [2022-04-08 14:47:35,908 INFO L290 TraceCheckUtils]: 50: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-08 14:47:35,909 INFO L290 TraceCheckUtils]: 51: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-08 14:47:35,909 INFO L290 TraceCheckUtils]: 52: Hoare triple {28503#false} assume ~s~0 != ~UNLOADED~0; {28503#false} is VALID [2022-04-08 14:47:35,909 INFO L290 TraceCheckUtils]: 53: Hoare triple {28503#false} assume -1 != ~status~1; {28503#false} is VALID [2022-04-08 14:47:35,909 INFO L290 TraceCheckUtils]: 54: Hoare triple {28503#false} assume !(~s~0 != ~SKIP2~0); {28503#false} is VALID [2022-04-08 14:47:35,909 INFO L290 TraceCheckUtils]: 55: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-08 14:47:35,909 INFO L290 TraceCheckUtils]: 56: Hoare triple {28503#false} assume !(~s~0 == ~DC~0); {28503#false} is VALID [2022-04-08 14:47:35,909 INFO L290 TraceCheckUtils]: 57: Hoare triple {28503#false} assume ~status~1 != ~lowerDriverReturn~0; {28503#false} is VALID [2022-04-08 14:47:35,909 INFO L272 TraceCheckUtils]: 58: Hoare triple {28503#false} call errorFn(); {28503#false} is VALID [2022-04-08 14:47:35,909 INFO L290 TraceCheckUtils]: 59: Hoare triple {28503#false} assume !false; {28503#false} is VALID [2022-04-08 14:47:35,910 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:35,910 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:35,910 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [129177789] [2022-04-08 14:47:35,910 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [129177789] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:35,910 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:35,910 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 14:47:35,910 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:35,911 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [361369419] [2022-04-08 14:47:35,911 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [361369419] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:35,911 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:35,911 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-08 14:47:35,911 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2027270325] [2022-04-08 14:47:35,911 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:35,911 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 60 [2022-04-08 14:47:35,912 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:35,912 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-08 14:47:35,953 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:35,953 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-08 14:47:35,953 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:35,953 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-08 14:47:35,953 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-04-08 14:47:35,954 INFO L87 Difference]: Start difference. First operand 211 states and 272 transitions. Second operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-08 14:47:37,241 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:37,242 INFO L93 Difference]: Finished difference Result 250 states and 313 transitions. [2022-04-08 14:47:37,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-08 14:47:37,242 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 60 [2022-04-08 14:47:37,242 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:37,242 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-08 14:47:37,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 283 transitions. [2022-04-08 14:47:37,245 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-08 14:47:37,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 283 transitions. [2022-04-08 14:47:37,247 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 283 transitions. [2022-04-08 14:47:37,492 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 283 edges. 283 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:37,495 INFO L225 Difference]: With dead ends: 250 [2022-04-08 14:47:37,495 INFO L226 Difference]: Without dead ends: 210 [2022-04-08 14:47:37,496 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-04-08 14:47:37,496 INFO L913 BasicCegarLoop]: 213 mSDtfsCounter, 238 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 238 SdHoareTripleChecker+Valid, 401 SdHoareTripleChecker+Invalid, 314 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:37,496 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [238 Valid, 401 Invalid, 314 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 265 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-08 14:47:37,497 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-04-08 14:47:37,859 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 210. [2022-04-08 14:47:37,859 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:37,859 INFO L82 GeneralOperation]: Start isEquivalent. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 14:47:37,859 INFO L74 IsIncluded]: Start isIncluded. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 14:47:37,860 INFO L87 Difference]: Start difference. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 14:47:37,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:37,863 INFO L93 Difference]: Finished difference Result 210 states and 267 transitions. [2022-04-08 14:47:37,863 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-08 14:47:37,864 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:37,864 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:37,864 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 210 states. [2022-04-08 14:47:37,865 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 210 states. [2022-04-08 14:47:37,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:37,868 INFO L93 Difference]: Finished difference Result 210 states and 267 transitions. [2022-04-08 14:47:37,869 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-08 14:47:37,869 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:37,869 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:37,869 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:37,869 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:37,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-08 14:47:37,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 267 transitions. [2022-04-08 14:47:37,873 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 267 transitions. Word has length 60 [2022-04-08 14:47:37,873 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:37,873 INFO L478 AbstractCegarLoop]: Abstraction has 210 states and 267 transitions. [2022-04-08 14:47:37,873 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-08 14:47:37,873 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 267 transitions. [2022-04-08 14:47:38,196 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 267 edges. 267 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:38,197 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-08 14:47:38,197 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-04-08 14:47:38,197 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:38,197 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:38,197 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-04-08 14:47:38,198 INFO L403 AbstractCegarLoop]: === Iteration 18 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:38,198 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:38,198 INFO L85 PathProgramCache]: Analyzing trace with hash -1986597587, now seen corresponding path program 1 times [2022-04-08 14:47:38,198 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:38,198 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [3047334] [2022-04-08 14:47:38,199 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:38,199 INFO L85 PathProgramCache]: Analyzing trace with hash -1986597587, now seen corresponding path program 2 times [2022-04-08 14:47:38,199 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:38,199 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [552963492] [2022-04-08 14:47:38,199 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:38,199 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:38,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:38,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:38,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:38,313 INFO L290 TraceCheckUtils]: 0: Hoare triple {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-08 14:47:38,313 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-08 14:47:38,313 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #783#return; {29918#true} is VALID [2022-04-08 14:47:38,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:38,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:38,342 INFO L290 TraceCheckUtils]: 0: Hoare triple {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-08 14:47:38,343 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-08 14:47:38,343 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #715#return; {29918#true} is VALID [2022-04-08 14:47:38,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:38,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:38,356 INFO L290 TraceCheckUtils]: 0: Hoare triple {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-08 14:47:38,356 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-08 14:47:38,356 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #717#return; {29918#true} is VALID [2022-04-08 14:47:38,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-08 14:47:38,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:38,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-08 14:47:38,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:38,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-08 14:47:38,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:38,489 INFO L290 TraceCheckUtils]: 0: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-08 14:47:38,489 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-08 14:47:38,490 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-08 14:47:38,490 INFO L290 TraceCheckUtils]: 3: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-08 14:47:38,490 INFO L290 TraceCheckUtils]: 4: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-08 14:47:38,490 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-08 14:47:38,490 INFO L290 TraceCheckUtils]: 6: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-08 14:47:38,490 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 14:47:38,491 INFO L290 TraceCheckUtils]: 8: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,491 INFO L290 TraceCheckUtils]: 9: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,492 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,492 INFO L290 TraceCheckUtils]: 0: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-08 14:47:38,492 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-08 14:47:38,493 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-08 14:47:38,493 INFO L272 TraceCheckUtils]: 3: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:38,493 INFO L290 TraceCheckUtils]: 4: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-08 14:47:38,494 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-08 14:47:38,494 INFO L290 TraceCheckUtils]: 6: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-08 14:47:38,494 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-08 14:47:38,494 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-08 14:47:38,494 INFO L290 TraceCheckUtils]: 9: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-08 14:47:38,494 INFO L290 TraceCheckUtils]: 10: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-08 14:47:38,495 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 14:47:38,495 INFO L290 TraceCheckUtils]: 12: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,495 INFO L290 TraceCheckUtils]: 13: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,496 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,497 INFO L290 TraceCheckUtils]: 15: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,497 INFO L290 TraceCheckUtils]: 16: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,498 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-08 14:47:38,498 INFO L290 TraceCheckUtils]: 0: Hoare triple {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {29918#true} is VALID [2022-04-08 14:47:38,498 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {29918#true} is VALID [2022-04-08 14:47:38,498 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} assume !(0 != ~devExt__UpperConnectData__ClassService~1); {29918#true} is VALID [2022-04-08 14:47:38,498 INFO L290 TraceCheckUtils]: 3: Hoare triple {29918#true} assume !(~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 < ~sizeof__CONNECT_DATA~0);~connectData~0 := ~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0; {29918#true} is VALID [2022-04-08 14:47:38,498 INFO L290 TraceCheckUtils]: 4: Hoare triple {29918#true} assume !(~status~3 < 0); {29918#true} is VALID [2022-04-08 14:47:38,499 INFO L272 TraceCheckUtils]: 5: Hoare triple {29918#true} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:38,499 INFO L290 TraceCheckUtils]: 6: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-08 14:47:38,500 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-08 14:47:38,500 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-08 14:47:38,500 INFO L272 TraceCheckUtils]: 9: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:38,500 INFO L290 TraceCheckUtils]: 10: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-08 14:47:38,501 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-08 14:47:38,501 INFO L290 TraceCheckUtils]: 12: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-08 14:47:38,501 INFO L290 TraceCheckUtils]: 13: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-08 14:47:38,501 INFO L290 TraceCheckUtils]: 14: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-08 14:47:38,501 INFO L290 TraceCheckUtils]: 15: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-08 14:47:38,501 INFO L290 TraceCheckUtils]: 16: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-08 14:47:38,501 INFO L290 TraceCheckUtils]: 17: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 14:47:38,502 INFO L290 TraceCheckUtils]: 18: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,502 INFO L290 TraceCheckUtils]: 19: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,503 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,503 INFO L290 TraceCheckUtils]: 21: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,504 INFO L290 TraceCheckUtils]: 22: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,504 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-08 14:47:38,505 INFO L290 TraceCheckUtils]: 24: Hoare triple {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-08 14:47:38,505 INFO L290 TraceCheckUtils]: 25: Hoare triple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} assume true; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-08 14:47:38,506 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} {29918#true} #727#return; {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,507 INFO L272 TraceCheckUtils]: 0: Hoare triple {29918#true} call ULTIMATE.init(); {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:38,507 INFO L290 TraceCheckUtils]: 1: Hoare triple {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-08 14:47:38,507 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-08 14:47:38,508 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {29918#true} {29918#true} #783#return; {29918#true} is VALID [2022-04-08 14:47:38,508 INFO L272 TraceCheckUtils]: 4: Hoare triple {29918#true} call #t~ret81 := main(); {29918#true} is VALID [2022-04-08 14:47:38,508 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {29918#true} is VALID [2022-04-08 14:47:38,509 INFO L272 TraceCheckUtils]: 6: Hoare triple {29918#true} call _BLAST_init(); {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:38,509 INFO L290 TraceCheckUtils]: 7: Hoare triple {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-08 14:47:38,509 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-08 14:47:38,509 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {29918#true} {29918#true} #715#return; {29918#true} is VALID [2022-04-08 14:47:38,509 INFO L290 TraceCheckUtils]: 10: Hoare triple {29918#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-08 14:47:38,509 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume !(0 == ~irp_choice~0); {29918#true} is VALID [2022-04-08 14:47:38,510 INFO L272 TraceCheckUtils]: 12: Hoare triple {29918#true} call stub_driver_init(); {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:38,510 INFO L290 TraceCheckUtils]: 13: Hoare triple {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-08 14:47:38,510 INFO L290 TraceCheckUtils]: 14: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-08 14:47:38,510 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {29918#true} {29918#true} #717#return; {29918#true} is VALID [2022-04-08 14:47:38,510 INFO L290 TraceCheckUtils]: 16: Hoare triple {29918#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {29918#true} is VALID [2022-04-08 14:47:38,511 INFO L290 TraceCheckUtils]: 17: Hoare triple {29918#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {29918#true} is VALID [2022-04-08 14:47:38,511 INFO L290 TraceCheckUtils]: 18: Hoare triple {29918#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {29918#true} is VALID [2022-04-08 14:47:38,511 INFO L290 TraceCheckUtils]: 19: Hoare triple {29918#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {29918#true} is VALID [2022-04-08 14:47:38,511 INFO L290 TraceCheckUtils]: 20: Hoare triple {29918#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {29918#true} is VALID [2022-04-08 14:47:38,511 INFO L290 TraceCheckUtils]: 21: Hoare triple {29918#true} assume 8 == ~tmp_ndt_5~0; {29918#true} is VALID [2022-04-08 14:47:38,512 INFO L272 TraceCheckUtils]: 22: Hoare triple {29918#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:38,512 INFO L290 TraceCheckUtils]: 23: Hoare triple {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {29918#true} is VALID [2022-04-08 14:47:38,512 INFO L290 TraceCheckUtils]: 24: Hoare triple {29918#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {29918#true} is VALID [2022-04-08 14:47:38,512 INFO L290 TraceCheckUtils]: 25: Hoare triple {29918#true} assume !(0 != ~devExt__UpperConnectData__ClassService~1); {29918#true} is VALID [2022-04-08 14:47:38,512 INFO L290 TraceCheckUtils]: 26: Hoare triple {29918#true} assume !(~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 < ~sizeof__CONNECT_DATA~0);~connectData~0 := ~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0; {29918#true} is VALID [2022-04-08 14:47:38,512 INFO L290 TraceCheckUtils]: 27: Hoare triple {29918#true} assume !(~status~3 < 0); {29918#true} is VALID [2022-04-08 14:47:38,513 INFO L272 TraceCheckUtils]: 28: Hoare triple {29918#true} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:38,513 INFO L290 TraceCheckUtils]: 29: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-08 14:47:38,513 INFO L290 TraceCheckUtils]: 30: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-08 14:47:38,513 INFO L290 TraceCheckUtils]: 31: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-08 14:47:38,514 INFO L272 TraceCheckUtils]: 32: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:38,514 INFO L290 TraceCheckUtils]: 33: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-08 14:47:38,514 INFO L290 TraceCheckUtils]: 34: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-08 14:47:38,514 INFO L290 TraceCheckUtils]: 35: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-08 14:47:38,514 INFO L290 TraceCheckUtils]: 36: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-08 14:47:38,514 INFO L290 TraceCheckUtils]: 37: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-08 14:47:38,514 INFO L290 TraceCheckUtils]: 38: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-08 14:47:38,515 INFO L290 TraceCheckUtils]: 39: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-08 14:47:38,515 INFO L290 TraceCheckUtils]: 40: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 14:47:38,515 INFO L290 TraceCheckUtils]: 41: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,516 INFO L290 TraceCheckUtils]: 42: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,516 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,517 INFO L290 TraceCheckUtils]: 44: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,517 INFO L290 TraceCheckUtils]: 45: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,518 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-08 14:47:38,518 INFO L290 TraceCheckUtils]: 47: Hoare triple {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-08 14:47:38,519 INFO L290 TraceCheckUtils]: 48: Hoare triple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} assume true; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-08 14:47:38,519 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} {29918#true} #727#return; {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,520 INFO L290 TraceCheckUtils]: 50: Hoare triple {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,520 INFO L290 TraceCheckUtils]: 51: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,520 INFO L290 TraceCheckUtils]: 52: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,521 INFO L290 TraceCheckUtils]: 53: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,521 INFO L290 TraceCheckUtils]: 54: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,521 INFO L290 TraceCheckUtils]: 55: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,522 INFO L290 TraceCheckUtils]: 56: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,522 INFO L290 TraceCheckUtils]: 57: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:38,522 INFO L290 TraceCheckUtils]: 58: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {29919#false} is VALID [2022-04-08 14:47:38,522 INFO L272 TraceCheckUtils]: 59: Hoare triple {29919#false} call errorFn(); {29919#false} is VALID [2022-04-08 14:47:38,523 INFO L290 TraceCheckUtils]: 60: Hoare triple {29919#false} assume !false; {29919#false} is VALID [2022-04-08 14:47:38,523 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:38,523 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:38,523 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [552963492] [2022-04-08 14:47:38,523 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [552963492] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:38,523 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:38,523 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-08 14:47:38,524 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:38,524 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [3047334] [2022-04-08 14:47:38,524 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [3047334] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:38,524 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:38,524 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-08 14:47:38,524 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1712678105] [2022-04-08 14:47:38,524 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:38,524 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-04-08 14:47:38,525 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:38,525 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:38,576 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:38,576 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-08 14:47:38,576 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:38,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-08 14:47:38,577 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-04-08 14:47:38,577 INFO L87 Difference]: Start difference. First operand 210 states and 267 transitions. Second operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:41,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:41,881 INFO L93 Difference]: Finished difference Result 222 states and 279 transitions. [2022-04-08 14:47:41,882 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-08 14:47:41,882 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-04-08 14:47:41,882 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:41,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:41,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 249 transitions. [2022-04-08 14:47:41,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:41,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 249 transitions. [2022-04-08 14:47:41,885 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 249 transitions. [2022-04-08 14:47:42,102 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 249 edges. 249 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:42,106 INFO L225 Difference]: With dead ends: 222 [2022-04-08 14:47:42,106 INFO L226 Difference]: Without dead ends: 184 [2022-04-08 14:47:42,106 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-04-08 14:47:42,107 INFO L913 BasicCegarLoop]: 212 mSDtfsCounter, 456 mSDsluCounter, 767 mSDsCounter, 0 mSdLazyCounter, 1349 mSolverCounterSat, 90 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 456 SdHoareTripleChecker+Valid, 979 SdHoareTripleChecker+Invalid, 1439 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 90 IncrementalHoareTripleChecker+Valid, 1349 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:42,107 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [456 Valid, 979 Invalid, 1439 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [90 Valid, 1349 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-04-08 14:47:42,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2022-04-08 14:47:42,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 184. [2022-04-08 14:47:42,419 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:42,420 INFO L82 GeneralOperation]: Start isEquivalent. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-08 14:47:42,420 INFO L74 IsIncluded]: Start isIncluded. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-08 14:47:42,420 INFO L87 Difference]: Start difference. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-08 14:47:42,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:42,423 INFO L93 Difference]: Finished difference Result 184 states and 229 transitions. [2022-04-08 14:47:42,423 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-08 14:47:42,423 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:42,424 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:42,424 INFO L74 IsIncluded]: Start isIncluded. First operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) Second operand 184 states. [2022-04-08 14:47:42,424 INFO L87 Difference]: Start difference. First operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) Second operand 184 states. [2022-04-08 14:47:42,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:42,427 INFO L93 Difference]: Finished difference Result 184 states and 229 transitions. [2022-04-08 14:47:42,427 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-08 14:47:42,427 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:42,428 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:42,428 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:42,428 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:42,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-08 14:47:42,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 229 transitions. [2022-04-08 14:47:42,432 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 229 transitions. Word has length 61 [2022-04-08 14:47:42,432 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:42,432 INFO L478 AbstractCegarLoop]: Abstraction has 184 states and 229 transitions. [2022-04-08 14:47:42,432 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:42,432 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 184 states and 229 transitions. [2022-04-08 14:47:42,777 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 229 edges. 229 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:42,777 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-08 14:47:42,777 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-04-08 14:47:42,777 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:42,778 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:42,778 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-04-08 14:47:42,778 INFO L403 AbstractCegarLoop]: === Iteration 19 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:42,778 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:42,778 INFO L85 PathProgramCache]: Analyzing trace with hash -2132592656, now seen corresponding path program 1 times [2022-04-08 14:47:42,778 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:42,778 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [546415149] [2022-04-08 14:47:42,779 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:42,779 INFO L85 PathProgramCache]: Analyzing trace with hash -2132592656, now seen corresponding path program 2 times [2022-04-08 14:47:42,779 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:42,779 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [275719299] [2022-04-08 14:47:42,779 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:42,779 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:42,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:42,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:42,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:42,857 INFO L290 TraceCheckUtils]: 0: Hoare triple {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-08 14:47:42,858 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-08 14:47:42,858 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #783#return; {31182#true} is VALID [2022-04-08 14:47:42,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:42,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:42,888 INFO L290 TraceCheckUtils]: 0: Hoare triple {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-08 14:47:42,888 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-08 14:47:42,888 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #715#return; {31182#true} is VALID [2022-04-08 14:47:42,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:42,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:42,904 INFO L290 TraceCheckUtils]: 0: Hoare triple {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-08 14:47:42,904 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-08 14:47:42,904 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #717#return; {31182#true} is VALID [2022-04-08 14:47:42,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-04-08 14:47:42,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:42,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-08 14:47:42,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:42,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-08 14:47:42,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:43,007 INFO L290 TraceCheckUtils]: 0: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-08 14:47:43,007 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-08 14:47:43,008 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-08 14:47:43,008 INFO L290 TraceCheckUtils]: 3: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-08 14:47:43,008 INFO L290 TraceCheckUtils]: 4: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-08 14:47:43,008 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-08 14:47:43,008 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-08 14:47:43,008 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 14:47:43,009 INFO L290 TraceCheckUtils]: 8: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,009 INFO L290 TraceCheckUtils]: 9: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,010 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,010 INFO L290 TraceCheckUtils]: 0: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-08 14:47:43,010 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-08 14:47:43,010 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-08 14:47:43,011 INFO L272 TraceCheckUtils]: 3: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:43,011 INFO L290 TraceCheckUtils]: 4: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-08 14:47:43,011 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-08 14:47:43,012 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-08 14:47:43,012 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-08 14:47:43,012 INFO L290 TraceCheckUtils]: 8: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-08 14:47:43,012 INFO L290 TraceCheckUtils]: 9: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-08 14:47:43,012 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-08 14:47:43,012 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 14:47:43,013 INFO L290 TraceCheckUtils]: 12: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,013 INFO L290 TraceCheckUtils]: 13: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,014 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,014 INFO L290 TraceCheckUtils]: 15: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,015 INFO L290 TraceCheckUtils]: 16: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,016 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-08 14:47:43,016 INFO L290 TraceCheckUtils]: 0: Hoare triple {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {31182#true} is VALID [2022-04-08 14:47:43,016 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume 0 == ~irpStack__MajorFunction~0; {31182#true} is VALID [2022-04-08 14:47:43,016 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {31182#true} is VALID [2022-04-08 14:47:43,016 INFO L290 TraceCheckUtils]: 3: Hoare triple {31182#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {31182#true} is VALID [2022-04-08 14:47:43,017 INFO L272 TraceCheckUtils]: 4: Hoare triple {31182#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:43,017 INFO L290 TraceCheckUtils]: 5: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-08 14:47:43,017 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-08 14:47:43,017 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-08 14:47:43,018 INFO L272 TraceCheckUtils]: 8: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:43,018 INFO L290 TraceCheckUtils]: 9: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-08 14:47:43,018 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-08 14:47:43,018 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-08 14:47:43,018 INFO L290 TraceCheckUtils]: 12: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-08 14:47:43,018 INFO L290 TraceCheckUtils]: 13: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-08 14:47:43,018 INFO L290 TraceCheckUtils]: 14: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-08 14:47:43,019 INFO L290 TraceCheckUtils]: 15: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-08 14:47:43,019 INFO L290 TraceCheckUtils]: 16: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 14:47:43,019 INFO L290 TraceCheckUtils]: 17: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,020 INFO L290 TraceCheckUtils]: 18: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,020 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,021 INFO L290 TraceCheckUtils]: 20: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,021 INFO L290 TraceCheckUtils]: 21: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,022 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-08 14:47:43,022 INFO L290 TraceCheckUtils]: 23: Hoare triple {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~tmp~0 := #t~ret43;havoc #t~ret43;#res := ~tmp~0; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-08 14:47:43,022 INFO L290 TraceCheckUtils]: 24: Hoare triple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} assume true; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-08 14:47:43,023 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} {31182#true} #719#return; {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,025 INFO L272 TraceCheckUtils]: 0: Hoare triple {31182#true} call ULTIMATE.init(); {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:43,025 INFO L290 TraceCheckUtils]: 1: Hoare triple {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-08 14:47:43,025 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-08 14:47:43,025 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {31182#true} {31182#true} #783#return; {31182#true} is VALID [2022-04-08 14:47:43,025 INFO L272 TraceCheckUtils]: 4: Hoare triple {31182#true} call #t~ret81 := main(); {31182#true} is VALID [2022-04-08 14:47:43,025 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {31182#true} is VALID [2022-04-08 14:47:43,026 INFO L272 TraceCheckUtils]: 6: Hoare triple {31182#true} call _BLAST_init(); {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:43,026 INFO L290 TraceCheckUtils]: 7: Hoare triple {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-08 14:47:43,026 INFO L290 TraceCheckUtils]: 8: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-08 14:47:43,027 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {31182#true} {31182#true} #715#return; {31182#true} is VALID [2022-04-08 14:47:43,027 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-08 14:47:43,027 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} assume !(0 == ~irp_choice~0); {31182#true} is VALID [2022-04-08 14:47:43,027 INFO L272 TraceCheckUtils]: 12: Hoare triple {31182#true} call stub_driver_init(); {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:43,027 INFO L290 TraceCheckUtils]: 13: Hoare triple {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-08 14:47:43,028 INFO L290 TraceCheckUtils]: 14: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-08 14:47:43,028 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {31182#true} {31182#true} #717#return; {31182#true} is VALID [2022-04-08 14:47:43,028 INFO L290 TraceCheckUtils]: 16: Hoare triple {31182#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {31182#true} is VALID [2022-04-08 14:47:43,028 INFO L290 TraceCheckUtils]: 17: Hoare triple {31182#true} assume 0 == ~tmp_ndt_1~0; {31182#true} is VALID [2022-04-08 14:47:43,029 INFO L272 TraceCheckUtils]: 18: Hoare triple {31182#true} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:43,029 INFO L290 TraceCheckUtils]: 19: Hoare triple {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {31182#true} is VALID [2022-04-08 14:47:43,029 INFO L290 TraceCheckUtils]: 20: Hoare triple {31182#true} assume 0 == ~irpStack__MajorFunction~0; {31182#true} is VALID [2022-04-08 14:47:43,029 INFO L290 TraceCheckUtils]: 21: Hoare triple {31182#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {31182#true} is VALID [2022-04-08 14:47:43,029 INFO L290 TraceCheckUtils]: 22: Hoare triple {31182#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {31182#true} is VALID [2022-04-08 14:47:43,030 INFO L272 TraceCheckUtils]: 23: Hoare triple {31182#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:43,030 INFO L290 TraceCheckUtils]: 24: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-08 14:47:43,030 INFO L290 TraceCheckUtils]: 25: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-08 14:47:43,030 INFO L290 TraceCheckUtils]: 26: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-08 14:47:43,031 INFO L272 TraceCheckUtils]: 27: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:43,031 INFO L290 TraceCheckUtils]: 28: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-08 14:47:43,031 INFO L290 TraceCheckUtils]: 29: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-08 14:47:43,031 INFO L290 TraceCheckUtils]: 30: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-08 14:47:43,031 INFO L290 TraceCheckUtils]: 31: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-08 14:47:43,031 INFO L290 TraceCheckUtils]: 32: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-08 14:47:43,031 INFO L290 TraceCheckUtils]: 33: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-08 14:47:43,031 INFO L290 TraceCheckUtils]: 34: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-08 14:47:43,032 INFO L290 TraceCheckUtils]: 35: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 14:47:43,032 INFO L290 TraceCheckUtils]: 36: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,032 INFO L290 TraceCheckUtils]: 37: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,033 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,033 INFO L290 TraceCheckUtils]: 39: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,034 INFO L290 TraceCheckUtils]: 40: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,034 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-08 14:47:43,035 INFO L290 TraceCheckUtils]: 42: Hoare triple {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~tmp~0 := #t~ret43;havoc #t~ret43;#res := ~tmp~0; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-08 14:47:43,035 INFO L290 TraceCheckUtils]: 43: Hoare triple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} assume true; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-08 14:47:43,036 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} {31182#true} #719#return; {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,036 INFO L290 TraceCheckUtils]: 45: Hoare triple {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret29 && #t~ret29 <= 2147483647;~status~1 := #t~ret29;havoc #t~ret29; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,036 INFO L290 TraceCheckUtils]: 46: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,037 INFO L290 TraceCheckUtils]: 47: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,037 INFO L290 TraceCheckUtils]: 48: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,037 INFO L290 TraceCheckUtils]: 49: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,038 INFO L290 TraceCheckUtils]: 50: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,038 INFO L290 TraceCheckUtils]: 51: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,038 INFO L290 TraceCheckUtils]: 52: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:43,039 INFO L290 TraceCheckUtils]: 53: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {31183#false} is VALID [2022-04-08 14:47:43,039 INFO L272 TraceCheckUtils]: 54: Hoare triple {31183#false} call errorFn(); {31183#false} is VALID [2022-04-08 14:47:43,039 INFO L290 TraceCheckUtils]: 55: Hoare triple {31183#false} assume !false; {31183#false} is VALID [2022-04-08 14:47:43,039 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:43,039 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:43,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [275719299] [2022-04-08 14:47:43,039 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [275719299] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:43,039 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:43,040 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-08 14:47:43,040 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:43,040 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [546415149] [2022-04-08 14:47:43,040 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [546415149] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:43,040 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:43,040 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-08 14:47:43,040 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [405101332] [2022-04-08 14:47:43,040 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:43,041 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 56 [2022-04-08 14:47:43,041 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:43,041 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:43,087 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:43,088 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-08 14:47:43,088 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:43,088 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-08 14:47:43,088 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-04-08 14:47:43,088 INFO L87 Difference]: Start difference. First operand 184 states and 229 transitions. Second operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:45,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:45,971 INFO L93 Difference]: Finished difference Result 196 states and 241 transitions. [2022-04-08 14:47:45,971 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-08 14:47:45,971 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 56 [2022-04-08 14:47:45,971 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:45,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:45,976 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 211 transitions. [2022-04-08 14:47:45,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:45,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 211 transitions. [2022-04-08 14:47:45,978 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 211 transitions. [2022-04-08 14:47:46,162 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 211 edges. 211 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:46,164 INFO L225 Difference]: With dead ends: 196 [2022-04-08 14:47:46,164 INFO L226 Difference]: Without dead ends: 182 [2022-04-08 14:47:46,165 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-04-08 14:47:46,165 INFO L913 BasicCegarLoop]: 165 mSDtfsCounter, 343 mSDsluCounter, 626 mSDsCounter, 0 mSdLazyCounter, 1181 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 343 SdHoareTripleChecker+Valid, 791 SdHoareTripleChecker+Invalid, 1262 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 1181 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:46,165 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [343 Valid, 791 Invalid, 1262 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 1181 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-08 14:47:46,166 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2022-04-08 14:47:46,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 182. [2022-04-08 14:47:46,476 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:46,477 INFO L82 GeneralOperation]: Start isEquivalent. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-08 14:47:46,477 INFO L74 IsIncluded]: Start isIncluded. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-08 14:47:46,477 INFO L87 Difference]: Start difference. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-08 14:47:46,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:46,480 INFO L93 Difference]: Finished difference Result 182 states and 225 transitions. [2022-04-08 14:47:46,480 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-08 14:47:46,480 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:46,480 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:46,480 INFO L74 IsIncluded]: Start isIncluded. First operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) Second operand 182 states. [2022-04-08 14:47:46,480 INFO L87 Difference]: Start difference. First operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) Second operand 182 states. [2022-04-08 14:47:46,483 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:46,483 INFO L93 Difference]: Finished difference Result 182 states and 225 transitions. [2022-04-08 14:47:46,483 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-08 14:47:46,483 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:46,484 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:46,484 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:46,484 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:46,484 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-08 14:47:46,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 225 transitions. [2022-04-08 14:47:46,487 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 225 transitions. Word has length 56 [2022-04-08 14:47:46,487 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:46,488 INFO L478 AbstractCegarLoop]: Abstraction has 182 states and 225 transitions. [2022-04-08 14:47:46,488 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:46,488 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 182 states and 225 transitions. [2022-04-08 14:47:46,788 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 225 edges. 225 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:46,789 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-08 14:47:46,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-04-08 14:47:46,789 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:46,789 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:46,790 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-04-08 14:47:46,790 INFO L403 AbstractCegarLoop]: === Iteration 20 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:46,790 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:46,790 INFO L85 PathProgramCache]: Analyzing trace with hash 1221590652, now seen corresponding path program 1 times [2022-04-08 14:47:46,790 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:46,790 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1182700013] [2022-04-08 14:47:46,791 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:46,791 INFO L85 PathProgramCache]: Analyzing trace with hash 1221590652, now seen corresponding path program 2 times [2022-04-08 14:47:46,791 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:46,791 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1499319310] [2022-04-08 14:47:46,791 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:46,791 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:46,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:46,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:46,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:46,888 INFO L290 TraceCheckUtils]: 0: Hoare triple {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-08 14:47:46,889 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-08 14:47:46,889 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #783#return; {32385#true} is VALID [2022-04-08 14:47:46,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:46,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:46,919 INFO L290 TraceCheckUtils]: 0: Hoare triple {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-08 14:47:46,920 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-08 14:47:46,920 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #715#return; {32385#true} is VALID [2022-04-08 14:47:46,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:46,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:46,935 INFO L290 TraceCheckUtils]: 0: Hoare triple {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-08 14:47:46,935 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-08 14:47:46,935 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #717#return; {32385#true} is VALID [2022-04-08 14:47:46,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-08 14:47:46,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:46,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-04-08 14:47:47,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:47,038 INFO L290 TraceCheckUtils]: 0: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-08 14:47:47,038 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-08 14:47:47,038 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-08 14:47:47,038 INFO L290 TraceCheckUtils]: 3: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-08 14:47:47,038 INFO L290 TraceCheckUtils]: 4: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:47,039 INFO L290 TraceCheckUtils]: 5: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:47,039 INFO L290 TraceCheckUtils]: 6: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:47,040 INFO L290 TraceCheckUtils]: 7: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 14:47:47,040 INFO L290 TraceCheckUtils]: 8: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 14:47:47,040 INFO L290 TraceCheckUtils]: 9: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 14:47:47,041 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 14:47:47,041 INFO L290 TraceCheckUtils]: 0: Hoare triple {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {32385#true} is VALID [2022-04-08 14:47:47,041 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume !(0 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-08 14:47:47,041 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} assume !(23 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-08 14:47:47,041 INFO L290 TraceCheckUtils]: 3: Hoare triple {32385#true} assume 2 == ~irpStack__MinorFunction~0; {32385#true} is VALID [2022-04-08 14:47:47,042 INFO L290 TraceCheckUtils]: 4: Hoare triple {32385#true} ~devExt__Removed~0 := 1; {32385#true} is VALID [2022-04-08 14:47:47,042 INFO L290 TraceCheckUtils]: 5: Hoare triple {32385#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {32385#true} is VALID [2022-04-08 14:47:47,042 INFO L290 TraceCheckUtils]: 6: Hoare triple {32385#true} #t~post15 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post15;havoc #t~post15;#t~post16 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post16;havoc #t~post16; {32385#true} is VALID [2022-04-08 14:47:47,042 INFO L272 TraceCheckUtils]: 7: Hoare triple {32385#true} call #t~ret17 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:47,043 INFO L290 TraceCheckUtils]: 8: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-08 14:47:47,043 INFO L290 TraceCheckUtils]: 9: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-08 14:47:47,043 INFO L290 TraceCheckUtils]: 10: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-08 14:47:47,043 INFO L290 TraceCheckUtils]: 11: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-08 14:47:47,043 INFO L290 TraceCheckUtils]: 12: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:47,044 INFO L290 TraceCheckUtils]: 13: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:47,044 INFO L290 TraceCheckUtils]: 14: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:47,044 INFO L290 TraceCheckUtils]: 15: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 14:47:47,045 INFO L290 TraceCheckUtils]: 16: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 14:47:47,045 INFO L290 TraceCheckUtils]: 17: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 14:47:47,046 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 14:47:47,046 INFO L290 TraceCheckUtils]: 19: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume -2147483648 <= #t~ret17 && #t~ret17 <= 2147483647;havoc #t~ret17;~status~0 := 0; {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,046 INFO L290 TraceCheckUtils]: 20: Hoare triple {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,047 INFO L290 TraceCheckUtils]: 21: Hoare triple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,047 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {32385#true} #723#return; {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,049 INFO L272 TraceCheckUtils]: 0: Hoare triple {32385#true} call ULTIMATE.init(); {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:47,049 INFO L290 TraceCheckUtils]: 1: Hoare triple {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-08 14:47:47,049 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-08 14:47:47,049 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {32385#true} {32385#true} #783#return; {32385#true} is VALID [2022-04-08 14:47:47,049 INFO L272 TraceCheckUtils]: 4: Hoare triple {32385#true} call #t~ret81 := main(); {32385#true} is VALID [2022-04-08 14:47:47,049 INFO L290 TraceCheckUtils]: 5: Hoare triple {32385#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {32385#true} is VALID [2022-04-08 14:47:47,051 INFO L272 TraceCheckUtils]: 6: Hoare triple {32385#true} call _BLAST_init(); {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:47,051 INFO L290 TraceCheckUtils]: 7: Hoare triple {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-08 14:47:47,051 INFO L290 TraceCheckUtils]: 8: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-08 14:47:47,051 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {32385#true} {32385#true} #715#return; {32385#true} is VALID [2022-04-08 14:47:47,051 INFO L290 TraceCheckUtils]: 10: Hoare triple {32385#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-08 14:47:47,051 INFO L290 TraceCheckUtils]: 11: Hoare triple {32385#true} assume !(0 == ~irp_choice~0); {32385#true} is VALID [2022-04-08 14:47:47,052 INFO L272 TraceCheckUtils]: 12: Hoare triple {32385#true} call stub_driver_init(); {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:47,052 INFO L290 TraceCheckUtils]: 13: Hoare triple {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-08 14:47:47,052 INFO L290 TraceCheckUtils]: 14: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-08 14:47:47,052 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {32385#true} {32385#true} #717#return; {32385#true} is VALID [2022-04-08 14:47:47,052 INFO L290 TraceCheckUtils]: 16: Hoare triple {32385#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {32385#true} is VALID [2022-04-08 14:47:47,052 INFO L290 TraceCheckUtils]: 17: Hoare triple {32385#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {32385#true} is VALID [2022-04-08 14:47:47,052 INFO L290 TraceCheckUtils]: 18: Hoare triple {32385#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {32385#true} is VALID [2022-04-08 14:47:47,052 INFO L290 TraceCheckUtils]: 19: Hoare triple {32385#true} assume 3 == ~tmp_ndt_3~0; {32385#true} is VALID [2022-04-08 14:47:47,053 INFO L272 TraceCheckUtils]: 20: Hoare triple {32385#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:47,053 INFO L290 TraceCheckUtils]: 21: Hoare triple {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {32385#true} is VALID [2022-04-08 14:47:47,053 INFO L290 TraceCheckUtils]: 22: Hoare triple {32385#true} assume !(0 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-08 14:47:47,054 INFO L290 TraceCheckUtils]: 23: Hoare triple {32385#true} assume !(23 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-08 14:47:47,054 INFO L290 TraceCheckUtils]: 24: Hoare triple {32385#true} assume 2 == ~irpStack__MinorFunction~0; {32385#true} is VALID [2022-04-08 14:47:47,054 INFO L290 TraceCheckUtils]: 25: Hoare triple {32385#true} ~devExt__Removed~0 := 1; {32385#true} is VALID [2022-04-08 14:47:47,054 INFO L290 TraceCheckUtils]: 26: Hoare triple {32385#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {32385#true} is VALID [2022-04-08 14:47:47,054 INFO L290 TraceCheckUtils]: 27: Hoare triple {32385#true} #t~post15 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post15;havoc #t~post15;#t~post16 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post16;havoc #t~post16; {32385#true} is VALID [2022-04-08 14:47:47,055 INFO L272 TraceCheckUtils]: 28: Hoare triple {32385#true} call #t~ret17 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:47,055 INFO L290 TraceCheckUtils]: 29: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-08 14:47:47,055 INFO L290 TraceCheckUtils]: 30: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-08 14:47:47,055 INFO L290 TraceCheckUtils]: 31: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-08 14:47:47,055 INFO L290 TraceCheckUtils]: 32: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-08 14:47:47,055 INFO L290 TraceCheckUtils]: 33: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:47,056 INFO L290 TraceCheckUtils]: 34: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:47,056 INFO L290 TraceCheckUtils]: 35: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-08 14:47:47,057 INFO L290 TraceCheckUtils]: 36: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 14:47:47,057 INFO L290 TraceCheckUtils]: 37: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 14:47:47,057 INFO L290 TraceCheckUtils]: 38: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 14:47:47,058 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-08 14:47:47,058 INFO L290 TraceCheckUtils]: 40: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume -2147483648 <= #t~ret17 && #t~ret17 <= 2147483647;havoc #t~ret17;~status~0 := 0; {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,059 INFO L290 TraceCheckUtils]: 41: Hoare triple {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,059 INFO L290 TraceCheckUtils]: 42: Hoare triple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,060 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {32385#true} #723#return; {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,060 INFO L290 TraceCheckUtils]: 44: Hoare triple {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,060 INFO L290 TraceCheckUtils]: 45: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,061 INFO L290 TraceCheckUtils]: 46: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,061 INFO L290 TraceCheckUtils]: 47: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,061 INFO L290 TraceCheckUtils]: 48: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,062 INFO L290 TraceCheckUtils]: 49: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,062 INFO L290 TraceCheckUtils]: 50: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,062 INFO L290 TraceCheckUtils]: 51: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:47,063 INFO L290 TraceCheckUtils]: 52: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {32386#false} is VALID [2022-04-08 14:47:47,063 INFO L272 TraceCheckUtils]: 53: Hoare triple {32386#false} call errorFn(); {32386#false} is VALID [2022-04-08 14:47:47,063 INFO L290 TraceCheckUtils]: 54: Hoare triple {32386#false} assume !false; {32386#false} is VALID [2022-04-08 14:47:47,063 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:47,063 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:47,063 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1499319310] [2022-04-08 14:47:47,063 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1499319310] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:47,064 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:47,064 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-08 14:47:47,064 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:47,064 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1182700013] [2022-04-08 14:47:47,064 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1182700013] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:47,064 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:47,064 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-08 14:47:47,064 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1460877019] [2022-04-08 14:47:47,064 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:47,065 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-08 14:47:47,065 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:47,065 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:47,103 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:47,103 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-04-08 14:47:47,104 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:47,104 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-04-08 14:47:47,104 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2022-04-08 14:47:47,104 INFO L87 Difference]: Start difference. First operand 182 states and 225 transitions. Second operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:49,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:49,824 INFO L93 Difference]: Finished difference Result 235 states and 281 transitions. [2022-04-08 14:47:49,824 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-08 14:47:49,824 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-08 14:47:49,824 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:49,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:49,826 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 256 transitions. [2022-04-08 14:47:49,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:49,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 256 transitions. [2022-04-08 14:47:49,829 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 256 transitions. [2022-04-08 14:47:50,084 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 256 edges. 256 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:50,096 INFO L225 Difference]: With dead ends: 235 [2022-04-08 14:47:50,097 INFO L226 Difference]: Without dead ends: 218 [2022-04-08 14:47:50,097 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=101, Invalid=405, Unknown=0, NotChecked=0, Total=506 [2022-04-08 14:47:50,098 INFO L913 BasicCegarLoop]: 169 mSDtfsCounter, 565 mSDsluCounter, 430 mSDsCounter, 0 mSdLazyCounter, 892 mSolverCounterSat, 125 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 565 SdHoareTripleChecker+Valid, 599 SdHoareTripleChecker+Invalid, 1017 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 125 IncrementalHoareTripleChecker+Valid, 892 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:50,098 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [565 Valid, 599 Invalid, 1017 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [125 Valid, 892 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-04-08 14:47:50,098 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 218 states. [2022-04-08 14:47:50,417 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 218 to 188. [2022-04-08 14:47:50,417 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:50,418 INFO L82 GeneralOperation]: Start isEquivalent. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-08 14:47:50,418 INFO L74 IsIncluded]: Start isIncluded. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-08 14:47:50,419 INFO L87 Difference]: Start difference. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-08 14:47:50,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:50,421 INFO L93 Difference]: Finished difference Result 218 states and 263 transitions. [2022-04-08 14:47:50,422 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 263 transitions. [2022-04-08 14:47:50,422 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:50,422 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:50,422 INFO L74 IsIncluded]: Start isIncluded. First operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) Second operand 218 states. [2022-04-08 14:47:50,422 INFO L87 Difference]: Start difference. First operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) Second operand 218 states. [2022-04-08 14:47:50,425 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:50,425 INFO L93 Difference]: Finished difference Result 218 states and 263 transitions. [2022-04-08 14:47:50,425 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 263 transitions. [2022-04-08 14:47:50,425 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:50,425 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:50,425 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:50,426 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:50,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-08 14:47:50,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 232 transitions. [2022-04-08 14:47:50,429 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 232 transitions. Word has length 55 [2022-04-08 14:47:50,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:50,430 INFO L478 AbstractCegarLoop]: Abstraction has 188 states and 232 transitions. [2022-04-08 14:47:50,430 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:50,430 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 188 states and 232 transitions. [2022-04-08 14:47:50,789 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 232 edges. 232 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:50,789 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 232 transitions. [2022-04-08 14:47:50,790 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-04-08 14:47:50,790 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:50,790 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:50,790 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-04-08 14:47:50,790 INFO L403 AbstractCegarLoop]: === Iteration 21 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:50,790 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:50,790 INFO L85 PathProgramCache]: Analyzing trace with hash 2050869943, now seen corresponding path program 1 times [2022-04-08 14:47:50,791 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:50,791 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1907514998] [2022-04-08 14:47:50,791 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:50,791 INFO L85 PathProgramCache]: Analyzing trace with hash 2050869943, now seen corresponding path program 2 times [2022-04-08 14:47:50,791 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:50,791 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1900494491] [2022-04-08 14:47:50,791 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:50,791 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:50,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:50,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:50,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:50,873 INFO L290 TraceCheckUtils]: 0: Hoare triple {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-08 14:47:50,873 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-08 14:47:50,873 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #783#return; {33749#true} is VALID [2022-04-08 14:47:50,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:50,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:50,904 INFO L290 TraceCheckUtils]: 0: Hoare triple {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-08 14:47:50,905 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-08 14:47:50,905 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #715#return; {33749#true} is VALID [2022-04-08 14:47:50,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:50,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:50,922 INFO L290 TraceCheckUtils]: 0: Hoare triple {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-08 14:47:50,922 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-08 14:47:50,922 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #717#return; {33749#true} is VALID [2022-04-08 14:47:50,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-08 14:47:50,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:50,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-04-08 14:47:50,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:51,015 INFO L290 TraceCheckUtils]: 0: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-08 14:47:51,015 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-08 14:47:51,015 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-08 14:47:51,015 INFO L290 TraceCheckUtils]: 3: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-08 14:47:51,015 INFO L290 TraceCheckUtils]: 4: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-08 14:47:51,016 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-08 14:47:51,016 INFO L290 TraceCheckUtils]: 6: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-08 14:47:51,016 INFO L290 TraceCheckUtils]: 7: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 14:47:51,017 INFO L290 TraceCheckUtils]: 8: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,017 INFO L290 TraceCheckUtils]: 9: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,018 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,018 INFO L290 TraceCheckUtils]: 0: Hoare triple {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {33749#true} is VALID [2022-04-08 14:47:51,018 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume !(0 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-08 14:47:51,018 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} assume !(23 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-08 14:47:51,018 INFO L290 TraceCheckUtils]: 3: Hoare triple {33749#true} assume !(2 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-08 14:47:51,019 INFO L290 TraceCheckUtils]: 4: Hoare triple {33749#true} assume 1 == ~irpStack__MinorFunction~0; {33749#true} is VALID [2022-04-08 14:47:51,019 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {33749#true} is VALID [2022-04-08 14:47:51,019 INFO L290 TraceCheckUtils]: 6: Hoare triple {33749#true} #t~post18 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post18;havoc #t~post18;#t~post19 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post19;havoc #t~post19; {33749#true} is VALID [2022-04-08 14:47:51,020 INFO L272 TraceCheckUtils]: 7: Hoare triple {33749#true} call #t~ret20 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:51,020 INFO L290 TraceCheckUtils]: 8: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-08 14:47:51,020 INFO L290 TraceCheckUtils]: 9: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-08 14:47:51,020 INFO L290 TraceCheckUtils]: 10: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-08 14:47:51,020 INFO L290 TraceCheckUtils]: 11: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-08 14:47:51,020 INFO L290 TraceCheckUtils]: 12: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-08 14:47:51,020 INFO L290 TraceCheckUtils]: 13: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-08 14:47:51,020 INFO L290 TraceCheckUtils]: 14: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-08 14:47:51,021 INFO L290 TraceCheckUtils]: 15: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 14:47:51,021 INFO L290 TraceCheckUtils]: 16: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,022 INFO L290 TraceCheckUtils]: 17: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,022 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,023 INFO L290 TraceCheckUtils]: 19: Hoare triple {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret20 && #t~ret20 <= 2147483647;~status~0 := #t~ret20;havoc #t~ret20; {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,023 INFO L290 TraceCheckUtils]: 20: Hoare triple {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,024 INFO L290 TraceCheckUtils]: 21: Hoare triple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,024 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {33749#true} #723#return; {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,026 INFO L272 TraceCheckUtils]: 0: Hoare triple {33749#true} call ULTIMATE.init(); {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:51,026 INFO L290 TraceCheckUtils]: 1: Hoare triple {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-08 14:47:51,026 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-08 14:47:51,026 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {33749#true} {33749#true} #783#return; {33749#true} is VALID [2022-04-08 14:47:51,026 INFO L272 TraceCheckUtils]: 4: Hoare triple {33749#true} call #t~ret81 := main(); {33749#true} is VALID [2022-04-08 14:47:51,026 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {33749#true} is VALID [2022-04-08 14:47:51,028 INFO L272 TraceCheckUtils]: 6: Hoare triple {33749#true} call _BLAST_init(); {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:51,028 INFO L290 TraceCheckUtils]: 7: Hoare triple {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-08 14:47:51,028 INFO L290 TraceCheckUtils]: 8: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-08 14:47:51,028 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {33749#true} {33749#true} #715#return; {33749#true} is VALID [2022-04-08 14:47:51,028 INFO L290 TraceCheckUtils]: 10: Hoare triple {33749#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-08 14:47:51,028 INFO L290 TraceCheckUtils]: 11: Hoare triple {33749#true} assume !(0 == ~irp_choice~0); {33749#true} is VALID [2022-04-08 14:47:51,029 INFO L272 TraceCheckUtils]: 12: Hoare triple {33749#true} call stub_driver_init(); {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:51,029 INFO L290 TraceCheckUtils]: 13: Hoare triple {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-08 14:47:51,029 INFO L290 TraceCheckUtils]: 14: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-08 14:47:51,029 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {33749#true} {33749#true} #717#return; {33749#true} is VALID [2022-04-08 14:47:51,029 INFO L290 TraceCheckUtils]: 16: Hoare triple {33749#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {33749#true} is VALID [2022-04-08 14:47:51,029 INFO L290 TraceCheckUtils]: 17: Hoare triple {33749#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {33749#true} is VALID [2022-04-08 14:47:51,030 INFO L290 TraceCheckUtils]: 18: Hoare triple {33749#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {33749#true} is VALID [2022-04-08 14:47:51,030 INFO L290 TraceCheckUtils]: 19: Hoare triple {33749#true} assume 3 == ~tmp_ndt_3~0; {33749#true} is VALID [2022-04-08 14:47:51,030 INFO L272 TraceCheckUtils]: 20: Hoare triple {33749#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:51,031 INFO L290 TraceCheckUtils]: 21: Hoare triple {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {33749#true} is VALID [2022-04-08 14:47:51,031 INFO L290 TraceCheckUtils]: 22: Hoare triple {33749#true} assume !(0 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-08 14:47:51,031 INFO L290 TraceCheckUtils]: 23: Hoare triple {33749#true} assume !(23 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-08 14:47:51,031 INFO L290 TraceCheckUtils]: 24: Hoare triple {33749#true} assume !(2 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-08 14:47:51,031 INFO L290 TraceCheckUtils]: 25: Hoare triple {33749#true} assume 1 == ~irpStack__MinorFunction~0; {33749#true} is VALID [2022-04-08 14:47:51,031 INFO L290 TraceCheckUtils]: 26: Hoare triple {33749#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {33749#true} is VALID [2022-04-08 14:47:51,031 INFO L290 TraceCheckUtils]: 27: Hoare triple {33749#true} #t~post18 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post18;havoc #t~post18;#t~post19 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post19;havoc #t~post19; {33749#true} is VALID [2022-04-08 14:47:51,032 INFO L272 TraceCheckUtils]: 28: Hoare triple {33749#true} call #t~ret20 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:51,032 INFO L290 TraceCheckUtils]: 29: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-08 14:47:51,032 INFO L290 TraceCheckUtils]: 30: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-08 14:47:51,032 INFO L290 TraceCheckUtils]: 31: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-08 14:47:51,032 INFO L290 TraceCheckUtils]: 32: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-08 14:47:51,032 INFO L290 TraceCheckUtils]: 33: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-08 14:47:51,032 INFO L290 TraceCheckUtils]: 34: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-08 14:47:51,033 INFO L290 TraceCheckUtils]: 35: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-08 14:47:51,033 INFO L290 TraceCheckUtils]: 36: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-08 14:47:51,033 INFO L290 TraceCheckUtils]: 37: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,034 INFO L290 TraceCheckUtils]: 38: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,034 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,035 INFO L290 TraceCheckUtils]: 40: Hoare triple {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret20 && #t~ret20 <= 2147483647;~status~0 := #t~ret20;havoc #t~ret20; {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,035 INFO L290 TraceCheckUtils]: 41: Hoare triple {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,035 INFO L290 TraceCheckUtils]: 42: Hoare triple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,036 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {33749#true} #723#return; {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,036 INFO L290 TraceCheckUtils]: 44: Hoare triple {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,037 INFO L290 TraceCheckUtils]: 45: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,037 INFO L290 TraceCheckUtils]: 46: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,037 INFO L290 TraceCheckUtils]: 47: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,038 INFO L290 TraceCheckUtils]: 48: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,038 INFO L290 TraceCheckUtils]: 49: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,038 INFO L290 TraceCheckUtils]: 50: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,039 INFO L290 TraceCheckUtils]: 51: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-08 14:47:51,039 INFO L290 TraceCheckUtils]: 52: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {33750#false} is VALID [2022-04-08 14:47:51,039 INFO L272 TraceCheckUtils]: 53: Hoare triple {33750#false} call errorFn(); {33750#false} is VALID [2022-04-08 14:47:51,039 INFO L290 TraceCheckUtils]: 54: Hoare triple {33750#false} assume !false; {33750#false} is VALID [2022-04-08 14:47:51,040 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:51,040 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:51,040 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1900494491] [2022-04-08 14:47:51,040 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1900494491] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:51,040 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:51,040 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-08 14:47:51,040 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:51,040 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1907514998] [2022-04-08 14:47:51,041 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1907514998] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:51,041 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:51,041 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-08 14:47:51,041 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [652596365] [2022-04-08 14:47:51,041 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:51,042 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-08 14:47:51,042 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:51,042 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:51,083 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:51,083 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-08 14:47:51,084 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:51,084 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-08 14:47:51,084 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-04-08 14:47:51,084 INFO L87 Difference]: Start difference. First operand 188 states and 232 transitions. Second operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:53,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:53,421 INFO L93 Difference]: Finished difference Result 204 states and 248 transitions. [2022-04-08 14:47:53,421 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-08 14:47:53,422 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-08 14:47:53,422 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:53,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:53,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 211 transitions. [2022-04-08 14:47:53,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:53,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 211 transitions. [2022-04-08 14:47:53,424 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 211 transitions. [2022-04-08 14:47:53,606 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 211 edges. 211 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:53,609 INFO L225 Difference]: With dead ends: 204 [2022-04-08 14:47:53,609 INFO L226 Difference]: Without dead ends: 166 [2022-04-08 14:47:53,609 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-04-08 14:47:53,610 INFO L913 BasicCegarLoop]: 161 mSDtfsCounter, 345 mSDsluCounter, 489 mSDsCounter, 0 mSdLazyCounter, 923 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 345 SdHoareTripleChecker+Valid, 650 SdHoareTripleChecker+Invalid, 1000 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 923 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:53,610 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [345 Valid, 650 Invalid, 1000 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 923 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-08 14:47:53,611 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2022-04-08 14:47:53,937 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 166. [2022-04-08 14:47:53,938 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:53,938 INFO L82 GeneralOperation]: Start isEquivalent. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 14:47:53,938 INFO L74 IsIncluded]: Start isIncluded. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 14:47:53,938 INFO L87 Difference]: Start difference. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 14:47:53,940 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:53,940 INFO L93 Difference]: Finished difference Result 166 states and 189 transitions. [2022-04-08 14:47:53,940 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-08 14:47:53,940 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:53,940 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:53,940 INFO L74 IsIncluded]: Start isIncluded. First operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 166 states. [2022-04-08 14:47:53,941 INFO L87 Difference]: Start difference. First operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 166 states. [2022-04-08 14:47:53,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:53,943 INFO L93 Difference]: Finished difference Result 166 states and 189 transitions. [2022-04-08 14:47:53,943 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-08 14:47:53,943 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:53,943 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:53,943 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:53,943 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:53,944 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 14:47:53,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 189 transitions. [2022-04-08 14:47:53,946 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 189 transitions. Word has length 55 [2022-04-08 14:47:53,946 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:53,946 INFO L478 AbstractCegarLoop]: Abstraction has 166 states and 189 transitions. [2022-04-08 14:47:53,946 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-08 14:47:53,946 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 166 states and 189 transitions. [2022-04-08 14:47:54,184 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 189 edges. 189 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:54,184 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-08 14:47:54,185 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-04-08 14:47:54,185 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:54,185 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:54,185 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2022-04-08 14:47:54,185 INFO L403 AbstractCegarLoop]: === Iteration 22 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:54,186 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:54,186 INFO L85 PathProgramCache]: Analyzing trace with hash 1918234721, now seen corresponding path program 1 times [2022-04-08 14:47:54,186 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:54,186 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1156875441] [2022-04-08 14:47:54,186 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:54,186 INFO L85 PathProgramCache]: Analyzing trace with hash 1918234721, now seen corresponding path program 2 times [2022-04-08 14:47:54,186 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:54,187 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [975786964] [2022-04-08 14:47:54,187 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:54,187 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:54,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:54,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-08 14:47:54,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:54,265 INFO L290 TraceCheckUtils]: 0: Hoare triple {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-08 14:47:54,265 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 14:47:54,265 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #783#return; {34884#true} is VALID [2022-04-08 14:47:54,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-08 14:47:54,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:54,288 INFO L290 TraceCheckUtils]: 0: Hoare triple {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-08 14:47:54,288 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 14:47:54,288 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #715#return; {34884#true} is VALID [2022-04-08 14:47:54,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-08 14:47:54,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:54,300 INFO L290 TraceCheckUtils]: 0: Hoare triple {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-08 14:47:54,301 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 14:47:54,301 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #717#return; {34884#true} is VALID [2022-04-08 14:47:54,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-08 14:47:54,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:54,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-08 14:47:54,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:54,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-08 14:47:54,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-08 14:47:54,366 INFO L290 TraceCheckUtils]: 0: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-08 14:47:54,366 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 14:47:54,366 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-08 14:47:54,367 INFO L290 TraceCheckUtils]: 0: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-08 14:47:54,369 INFO L272 TraceCheckUtils]: 1: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:54,369 INFO L290 TraceCheckUtils]: 2: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-08 14:47:54,370 INFO L290 TraceCheckUtils]: 3: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 14:47:54,370 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-08 14:47:54,370 INFO L290 TraceCheckUtils]: 5: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-08 14:47:54,370 INFO L290 TraceCheckUtils]: 6: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-08 14:47:54,371 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-08 14:47:54,372 INFO L290 TraceCheckUtils]: 0: Hoare triple {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {34884#true} is VALID [2022-04-08 14:47:54,372 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume 0 != ~compRegistered~0; {34884#true} is VALID [2022-04-08 14:47:54,372 INFO L272 TraceCheckUtils]: 2: Hoare triple {34884#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:54,372 INFO L290 TraceCheckUtils]: 3: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-08 14:47:54,373 INFO L272 TraceCheckUtils]: 4: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:54,373 INFO L290 TraceCheckUtils]: 5: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-08 14:47:54,373 INFO L290 TraceCheckUtils]: 6: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 14:47:54,373 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-08 14:47:54,374 INFO L290 TraceCheckUtils]: 8: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-08 14:47:54,374 INFO L290 TraceCheckUtils]: 9: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-08 14:47:54,375 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-08 14:47:54,375 INFO L290 TraceCheckUtils]: 11: Hoare triple {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-08 14:47:54,376 INFO L290 TraceCheckUtils]: 12: Hoare triple {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {34885#false} is VALID [2022-04-08 14:47:54,376 INFO L290 TraceCheckUtils]: 13: Hoare triple {34885#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {34885#false} is VALID [2022-04-08 14:47:54,376 INFO L290 TraceCheckUtils]: 14: Hoare triple {34885#false} assume 0 == ~tmp_ndt_6~0; {34885#false} is VALID [2022-04-08 14:47:54,376 INFO L290 TraceCheckUtils]: 15: Hoare triple {34885#false} ~returnVal2~0 := 0; {34885#false} is VALID [2022-04-08 14:47:54,376 INFO L290 TraceCheckUtils]: 16: Hoare triple {34885#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {34885#false} is VALID [2022-04-08 14:47:54,376 INFO L290 TraceCheckUtils]: 17: Hoare triple {34885#false} #res := ~returnVal2~0; {34885#false} is VALID [2022-04-08 14:47:54,376 INFO L290 TraceCheckUtils]: 18: Hoare triple {34885#false} assume true; {34885#false} is VALID [2022-04-08 14:47:54,376 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {34885#false} {34884#true} #755#return; {34885#false} is VALID [2022-04-08 14:47:54,378 INFO L272 TraceCheckUtils]: 0: Hoare triple {34884#true} call ULTIMATE.init(); {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-08 14:47:54,378 INFO L290 TraceCheckUtils]: 1: Hoare triple {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-08 14:47:54,378 INFO L290 TraceCheckUtils]: 2: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 14:47:54,378 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {34884#true} {34884#true} #783#return; {34884#true} is VALID [2022-04-08 14:47:54,378 INFO L272 TraceCheckUtils]: 4: Hoare triple {34884#true} call #t~ret81 := main(); {34884#true} is VALID [2022-04-08 14:47:54,378 INFO L290 TraceCheckUtils]: 5: Hoare triple {34884#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {34884#true} is VALID [2022-04-08 14:47:54,379 INFO L272 TraceCheckUtils]: 6: Hoare triple {34884#true} call _BLAST_init(); {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:54,380 INFO L290 TraceCheckUtils]: 7: Hoare triple {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-08 14:47:54,380 INFO L290 TraceCheckUtils]: 8: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 14:47:54,380 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {34884#true} {34884#true} #715#return; {34884#true} is VALID [2022-04-08 14:47:54,380 INFO L290 TraceCheckUtils]: 10: Hoare triple {34884#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-08 14:47:54,380 INFO L290 TraceCheckUtils]: 11: Hoare triple {34884#true} assume !(0 == ~irp_choice~0); {34884#true} is VALID [2022-04-08 14:47:54,381 INFO L272 TraceCheckUtils]: 12: Hoare triple {34884#true} call stub_driver_init(); {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:54,381 INFO L290 TraceCheckUtils]: 13: Hoare triple {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-08 14:47:54,381 INFO L290 TraceCheckUtils]: 14: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 14:47:54,381 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {34884#true} {34884#true} #717#return; {34884#true} is VALID [2022-04-08 14:47:54,381 INFO L290 TraceCheckUtils]: 16: Hoare triple {34884#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {34884#true} is VALID [2022-04-08 14:47:54,381 INFO L290 TraceCheckUtils]: 17: Hoare triple {34884#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {34884#true} is VALID [2022-04-08 14:47:54,381 INFO L290 TraceCheckUtils]: 18: Hoare triple {34884#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {34884#true} is VALID [2022-04-08 14:47:54,381 INFO L290 TraceCheckUtils]: 19: Hoare triple {34884#true} assume 3 == ~tmp_ndt_3~0; {34884#true} is VALID [2022-04-08 14:47:54,382 INFO L272 TraceCheckUtils]: 20: Hoare triple {34884#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {34884#true} is VALID [2022-04-08 14:47:54,382 INFO L290 TraceCheckUtils]: 21: Hoare triple {34884#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {34884#true} is VALID [2022-04-08 14:47:54,382 INFO L290 TraceCheckUtils]: 22: Hoare triple {34884#true} assume 0 == ~irpStack__MinorFunction~0; {34884#true} is VALID [2022-04-08 14:47:54,382 INFO L290 TraceCheckUtils]: 23: Hoare triple {34884#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {34884#true} is VALID [2022-04-08 14:47:54,382 INFO L290 TraceCheckUtils]: 24: Hoare triple {34884#true} assume !(~s~0 != ~NP~0); {34884#true} is VALID [2022-04-08 14:47:54,382 INFO L290 TraceCheckUtils]: 25: Hoare triple {34884#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {34884#true} is VALID [2022-04-08 14:47:54,382 INFO L290 TraceCheckUtils]: 26: Hoare triple {34884#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {34884#true} is VALID [2022-04-08 14:47:54,383 INFO L272 TraceCheckUtils]: 27: Hoare triple {34884#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-08 14:47:54,383 INFO L290 TraceCheckUtils]: 28: Hoare triple {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {34884#true} is VALID [2022-04-08 14:47:54,383 INFO L290 TraceCheckUtils]: 29: Hoare triple {34884#true} assume 0 != ~compRegistered~0; {34884#true} is VALID [2022-04-08 14:47:54,384 INFO L272 TraceCheckUtils]: 30: Hoare triple {34884#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:54,384 INFO L290 TraceCheckUtils]: 31: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-08 14:47:54,385 INFO L272 TraceCheckUtils]: 32: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-08 14:47:54,385 INFO L290 TraceCheckUtils]: 33: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-08 14:47:54,385 INFO L290 TraceCheckUtils]: 34: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-08 14:47:54,385 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-08 14:47:54,385 INFO L290 TraceCheckUtils]: 36: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-08 14:47:54,386 INFO L290 TraceCheckUtils]: 37: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-08 14:47:54,387 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-08 14:47:54,387 INFO L290 TraceCheckUtils]: 39: Hoare triple {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-08 14:47:54,387 INFO L290 TraceCheckUtils]: 40: Hoare triple {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {34885#false} is VALID [2022-04-08 14:47:54,388 INFO L290 TraceCheckUtils]: 41: Hoare triple {34885#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {34885#false} is VALID [2022-04-08 14:47:54,388 INFO L290 TraceCheckUtils]: 42: Hoare triple {34885#false} assume 0 == ~tmp_ndt_6~0; {34885#false} is VALID [2022-04-08 14:47:54,388 INFO L290 TraceCheckUtils]: 43: Hoare triple {34885#false} ~returnVal2~0 := 0; {34885#false} is VALID [2022-04-08 14:47:54,388 INFO L290 TraceCheckUtils]: 44: Hoare triple {34885#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {34885#false} is VALID [2022-04-08 14:47:54,388 INFO L290 TraceCheckUtils]: 45: Hoare triple {34885#false} #res := ~returnVal2~0; {34885#false} is VALID [2022-04-08 14:47:54,388 INFO L290 TraceCheckUtils]: 46: Hoare triple {34885#false} assume true; {34885#false} is VALID [2022-04-08 14:47:54,388 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {34885#false} {34884#true} #755#return; {34885#false} is VALID [2022-04-08 14:47:54,388 INFO L290 TraceCheckUtils]: 48: Hoare triple {34885#false} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {34885#false} is VALID [2022-04-08 14:47:54,388 INFO L290 TraceCheckUtils]: 49: Hoare triple {34885#false} assume !(259 == ~__cil_tmp23~0); {34885#false} is VALID [2022-04-08 14:47:54,388 INFO L290 TraceCheckUtils]: 50: Hoare triple {34885#false} assume ~status~0 >= 0; {34885#false} is VALID [2022-04-08 14:47:54,389 INFO L290 TraceCheckUtils]: 51: Hoare triple {34885#false} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {34885#false} is VALID [2022-04-08 14:47:54,389 INFO L290 TraceCheckUtils]: 52: Hoare triple {34885#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {34885#false} is VALID [2022-04-08 14:47:54,389 INFO L272 TraceCheckUtils]: 53: Hoare triple {34885#false} call IofCompleteRequest(~Irp, 0); {34885#false} is VALID [2022-04-08 14:47:54,389 INFO L290 TraceCheckUtils]: 54: Hoare triple {34885#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {34885#false} is VALID [2022-04-08 14:47:54,389 INFO L290 TraceCheckUtils]: 55: Hoare triple {34885#false} assume !(~s~0 == ~NP~0); {34885#false} is VALID [2022-04-08 14:47:54,389 INFO L272 TraceCheckUtils]: 56: Hoare triple {34885#false} call errorFn(); {34885#false} is VALID [2022-04-08 14:47:54,389 INFO L290 TraceCheckUtils]: 57: Hoare triple {34885#false} assume !false; {34885#false} is VALID [2022-04-08 14:47:54,390 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-08 14:47:54,390 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-08 14:47:54,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [975786964] [2022-04-08 14:47:54,390 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [975786964] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:54,390 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:54,390 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-08 14:47:54,390 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-08 14:47:54,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1156875441] [2022-04-08 14:47:54,390 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1156875441] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-08 14:47:54,391 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-08 14:47:54,391 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-08 14:47:54,391 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [240470956] [2022-04-08 14:47:54,391 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-08 14:47:54,391 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-08 14:47:54,391 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-08 14:47:54,391 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:54,431 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:54,431 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-08 14:47:54,432 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:54,432 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-08 14:47:54,432 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-08 14:47:54,432 INFO L87 Difference]: Start difference. First operand 166 states and 189 transitions. Second operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:55,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:55,553 INFO L93 Difference]: Finished difference Result 202 states and 230 transitions. [2022-04-08 14:47:55,553 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-08 14:47:55,553 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-08 14:47:55,553 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-08 14:47:55,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:55,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 197 transitions. [2022-04-08 14:47:55,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:55,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 197 transitions. [2022-04-08 14:47:55,556 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 197 transitions. [2022-04-08 14:47:55,730 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 197 edges. 197 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:55,733 INFO L225 Difference]: With dead ends: 202 [2022-04-08 14:47:55,733 INFO L226 Difference]: Without dead ends: 160 [2022-04-08 14:47:55,733 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-08 14:47:55,733 INFO L913 BasicCegarLoop]: 130 mSDtfsCounter, 128 mSDsluCounter, 292 mSDsCounter, 0 mSdLazyCounter, 283 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 422 SdHoareTripleChecker+Invalid, 328 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 283 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-08 14:47:55,734 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [129 Valid, 422 Invalid, 328 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 283 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-08 14:47:55,734 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-04-08 14:47:56,024 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 160. [2022-04-08 14:47:56,024 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-08 14:47:56,024 INFO L82 GeneralOperation]: Start isEquivalent. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 14:47:56,024 INFO L74 IsIncluded]: Start isIncluded. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 14:47:56,025 INFO L87 Difference]: Start difference. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 14:47:56,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:56,026 INFO L93 Difference]: Finished difference Result 160 states and 180 transitions. [2022-04-08 14:47:56,027 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-08 14:47:56,027 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:56,027 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:56,027 INFO L74 IsIncluded]: Start isIncluded. First operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 160 states. [2022-04-08 14:47:56,027 INFO L87 Difference]: Start difference. First operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 160 states. [2022-04-08 14:47:56,029 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-08 14:47:56,029 INFO L93 Difference]: Finished difference Result 160 states and 180 transitions. [2022-04-08 14:47:56,029 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-08 14:47:56,029 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-08 14:47:56,029 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-08 14:47:56,029 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-08 14:47:56,029 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-08 14:47:56,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-08 14:47:56,032 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 180 transitions. [2022-04-08 14:47:56,032 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 180 transitions. Word has length 58 [2022-04-08 14:47:56,032 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-08 14:47:56,032 INFO L478 AbstractCegarLoop]: Abstraction has 160 states and 180 transitions. [2022-04-08 14:47:56,032 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-08 14:47:56,032 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 160 states and 180 transitions. [2022-04-08 14:47:56,262 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 180 edges. 180 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-08 14:47:56,262 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-08 14:47:56,262 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-04-08 14:47:56,262 INFO L491 BasicCegarLoop]: Found error trace [2022-04-08 14:47:56,263 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-08 14:47:56,263 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2022-04-08 14:47:56,263 INFO L403 AbstractCegarLoop]: === Iteration 23 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-08 14:47:56,263 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-08 14:47:56,263 INFO L85 PathProgramCache]: Analyzing trace with hash 1199488421, now seen corresponding path program 1 times [2022-04-08 14:47:56,263 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-08 14:47:56,263 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [2036153375] [2022-04-08 14:47:56,263 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-08 14:47:56,263 INFO L85 PathProgramCache]: Analyzing trace with hash 1199488421, now seen corresponding path program 2 times [2022-04-08 14:47:56,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-08 14:47:56,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1266086539] [2022-04-08 14:47:56,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-08 14:47:56,264 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-08 14:47:56,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-04-08 14:47:56,288 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-04-08 14:47:56,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-04-08 14:47:56,335 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-04-08 14:47:56,336 INFO L130 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found a feasible trace [2022-04-08 14:47:56,336 INFO L618 BasicCegarLoop]: Counterexample is feasible [2022-04-08 14:47:56,338 INFO L788 garLoopResultBuilder]: Registering result UNSAFE for location errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-04-08 14:47:56,339 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22 [2022-04-08 14:47:56,342 INFO L719 BasicCegarLoop]: Path program histogram: [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2] [2022-04-08 14:47:56,344 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-04-08 14:47:56,361 WARN L170 areAnnotationChecker]: reach_errorENTRY has no Hoare annotation [2022-04-08 14:47:56,361 WARN L170 areAnnotationChecker]: KeSetEventENTRY has no Hoare annotation [2022-04-08 14:47:56,361 WARN L170 areAnnotationChecker]: KbFilter_CompleteENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: stub_driver_initENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: KbFilter_PowerENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: _BLAST_initENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: errorFnENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: errorFnENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: IofCallDriverENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: PoCallDriverENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: IofCompleteRequestENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-04-08 14:47:56,362 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughENTRY has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: KbFilter_PnPENTRY has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: reach_errorFINAL has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: KeSetEventFINAL has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: stub_driver_initFINAL has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: _BLAST_initFINAL has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: errorFnFINAL has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: L475-1 has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: L475 has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: L475 has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-08 14:47:56,363 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: KeSetEventEXIT has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L624-1 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: stub_driver_initEXIT has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-04-08 14:47:56,364 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: _BLAST_initEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2022-04-08 14:47:56,365 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L489-1 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L756 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L756 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L754-1 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L645 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L645 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L935 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L935 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L883 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L883 has no Hoare annotation [2022-04-08 14:47:56,366 WARN L170 areAnnotationChecker]: L582 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L582 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L589 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L589 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L562-1 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L562 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L562 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L678-1 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L107 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L109 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L109 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: KbFilter_CompleteFINAL has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L342 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L342 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L724 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L724 has no Hoare annotation [2022-04-08 14:47:56,367 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L428 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L814-1 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L594-1 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L180-1 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L225-1 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L241-1 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L256-1 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L734-1 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L546-1 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L328 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L328 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L491-1 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L504 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L504 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L756-1 has no Hoare annotation [2022-04-08 14:47:56,368 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L653 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L644 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L644 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L884 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L684 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L684 has no Hoare annotation [2022-04-08 14:47:56,369 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L110 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L112 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L112 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L351 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L351 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L734 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L734 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L709 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L709 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: PoCallDriverFINAL has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-04-08 14:47:56,370 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L740 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L740 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: IofCallDriverFINAL has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L413 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L413 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L505 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-04-08 14:47:56,371 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L760 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L760 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L770 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L660 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L660 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L997 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L997 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L1003 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L1003 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L892 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L892 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L596 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L596 has no Hoare annotation [2022-04-08 14:47:56,372 WARN L170 areAnnotationChecker]: L997-1 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L267 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L684-1 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L221 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L221 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L113 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L115 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L115 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L356 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L356 has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: PoCallDriverEXIT has no Hoare annotation [2022-04-08 14:47:56,373 WARN L170 areAnnotationChecker]: L604 has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: L606 has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: L192-1 has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: L231-1 has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: L247-1 has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: L262-1 has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: L740-1 has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: L524 has no Hoare annotation [2022-04-08 14:47:56,374 WARN L170 areAnnotationChecker]: L524 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: L510 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: L512 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: L775 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: L777 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: L660-1 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: L1003-1 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: L903 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: L903 has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlFINAL has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: KbFilter_PnPFINAL has no Hoare annotation [2022-04-08 14:47:56,375 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughFINAL has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L225 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L225 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L357 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L357 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L361 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L361 has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectFINAL has no Hoare annotation [2022-04-08 14:47:56,376 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: KbFilter_PowerFINAL has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseFINAL has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: L956-2 has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: L956-2 has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlEXIT has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: KbFilter_PnPEXIT has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughEXIT has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughEXIT has no Hoare annotation [2022-04-08 14:47:56,377 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L256 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L256 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L383 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L366 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L366 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectEXIT has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L197-2 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L197-2 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: KbFilter_PowerEXIT has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-08 14:47:56,378 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseEXIT has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseEXIT has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L959-1 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L917 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L917 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L398 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L388 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L124 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L124 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L367 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L367 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L371 has no Hoare annotation [2022-04-08 14:47:56,379 WARN L170 areAnnotationChecker]: L371 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L199-1 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L206 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L206 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L205 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L393 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L546 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L546 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L814 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L814 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-04-08 14:47:56,380 WARN L170 areAnnotationChecker]: L374 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L447 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L447 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L931 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L931 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2022-04-08 14:47:56,381 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L133 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L133 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L453 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L453 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L136 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L136 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L142 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L142 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L145 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L145 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L148 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L148 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-04-08 14:47:56,382 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-04-08 14:47:56,383 WARN L170 areAnnotationChecker]: L154 has no Hoare annotation [2022-04-08 14:47:56,383 WARN L170 areAnnotationChecker]: L154 has no Hoare annotation [2022-04-08 14:47:56,383 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2022-04-08 14:47:56,383 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2022-04-08 14:47:56,383 WARN L170 areAnnotationChecker]: L160 has no Hoare annotation [2022-04-08 14:47:56,383 WARN L170 areAnnotationChecker]: L160 has no Hoare annotation [2022-04-08 14:47:56,383 WARN L170 areAnnotationChecker]: L163 has no Hoare annotation [2022-04-08 14:47:56,383 WARN L170 areAnnotationChecker]: L163 has no Hoare annotation [2022-04-08 14:47:56,383 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-04-08 14:47:56,383 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-04-08 14:47:56,383 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-04-08 14:47:56,385 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 08.04 02:47:56 BoogieIcfgContainer [2022-04-08 14:47:56,385 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-04-08 14:47:56,386 INFO L158 Benchmark]: Toolchain (without parser) took 81127.49ms. Allocated memory was 204.5MB in the beginning and 451.9MB in the end (delta: 247.5MB). Free memory was 153.7MB in the beginning and 216.0MB in the end (delta: -62.3MB). Peak memory consumption was 185.6MB. Max. memory is 8.0GB. [2022-04-08 14:47:56,386 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 204.5MB. Free memory was 171.5MB in the beginning and 171.4MB in the end (delta: 91.8kB). There was no memory consumed. Max. memory is 8.0GB. [2022-04-08 14:47:56,386 INFO L158 Benchmark]: CACSL2BoogieTranslator took 377.83ms. Allocated memory is still 204.5MB. Free memory was 153.6MB in the beginning and 170.5MB in the end (delta: -17.0MB). Peak memory consumption was 13.6MB. Max. memory is 8.0GB. [2022-04-08 14:47:56,386 INFO L158 Benchmark]: Boogie Preprocessor took 84.55ms. Allocated memory is still 204.5MB. Free memory was 170.5MB in the beginning and 167.4MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-04-08 14:47:56,386 INFO L158 Benchmark]: RCFGBuilder took 1051.61ms. Allocated memory was 204.5MB in the beginning and 245.4MB in the end (delta: 40.9MB). Free memory was 167.0MB in the beginning and 216.3MB in the end (delta: -49.3MB). Peak memory consumption was 41.8MB. Max. memory is 8.0GB. [2022-04-08 14:47:56,387 INFO L158 Benchmark]: TraceAbstraction took 79606.96ms. Allocated memory was 245.4MB in the beginning and 451.9MB in the end (delta: 206.6MB). Free memory was 215.7MB in the beginning and 216.0MB in the end (delta: -226.5kB). Peak memory consumption was 207.9MB. Max. memory is 8.0GB. [2022-04-08 14:47:56,387 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 204.5MB. Free memory was 171.5MB in the beginning and 171.4MB in the end (delta: 91.8kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 377.83ms. Allocated memory is still 204.5MB. Free memory was 153.6MB in the beginning and 170.5MB in the end (delta: -17.0MB). Peak memory consumption was 13.6MB. Max. memory is 8.0GB. * Boogie Preprocessor took 84.55ms. Allocated memory is still 204.5MB. Free memory was 170.5MB in the beginning and 167.4MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 1051.61ms. Allocated memory was 204.5MB in the beginning and 245.4MB in the end (delta: 40.9MB). Free memory was 167.0MB in the beginning and 216.3MB in the end (delta: -49.3MB). Peak memory consumption was 41.8MB. Max. memory is 8.0GB. * TraceAbstraction took 79606.96ms. Allocated memory was 245.4MB in the beginning and 451.9MB in the end (delta: 206.6MB). Free memory was 215.7MB in the beginning and 216.0MB in the end (delta: -226.5kB). Peak memory consumption was 207.9MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 1013]: a call to reach_error is reachable a call to reach_error is reachable We found a FailurePath: [L23] int KernelMode ; [L24] int Executive ; [L25] int DevicePowerState ; [L26] int s ; [L27] int UNLOADED ; [L28] int NP ; [L29] int DC ; [L30] int SKIP1 ; [L31] int SKIP2 ; [L32] int MPR1 ; [L33] int MPR3 ; [L34] int IPC ; [L35] int pended ; [L36] int compFptr ; [L37] int compRegistered ; [L38] int lowerDriverReturn ; [L39] int setEventCalled ; [L40] int customIrp ; [L41] int myStatus ; [L294] int status ; [L295] int irp = __VERIFIER_nondet_int() ; [L296] int pirp ; [L297] int pirp__IoStatus__Status ; [L298] int irp_choice = __VERIFIER_nondet_int() ; [L299] int devobj = __VERIFIER_nondet_int() ; [L300] int __cil_tmp8 ; [L302] KernelMode = 0 [L303] Executive = 0 [L304] DevicePowerState = 1 [L305] s = 0 [L306] UNLOADED = 0 [L307] NP = 0 [L308] DC = 0 [L309] SKIP1 = 0 [L310] SKIP2 = 0 [L311] MPR1 = 0 [L312] MPR3 = 0 [L313] IPC = 0 [L314] pended = 0 [L315] compFptr = 0 [L316] compRegistered = 0 [L317] lowerDriverReturn = 0 [L318] setEventCalled = 0 [L319] customIrp = 0 [L320] myStatus = 0 [L324] status = 0 [L325] pirp = irp [L326] CALL _BLAST_init() [L61] UNLOADED = 0 [L62] NP = 1 [L63] DC = 2 [L64] SKIP1 = 3 [L65] SKIP2 = 4 [L66] MPR1 = 5 [L67] MPR3 = 6 [L68] IPC = 7 [L69] s = UNLOADED [L70] pended = 0 [L71] compFptr = 0 [L72] compRegistered = 0 [L73] lowerDriverReturn = 0 [L74] setEventCalled = 0 [L75] customIrp = 0 [L326] RET _BLAST_init() [L328] COND TRUE status >= 0 [L329] s = NP [L330] customIrp = 0 [L331] setEventCalled = customIrp [L332] lowerDriverReturn = setEventCalled [L333] compRegistered = lowerDriverReturn [L334] pended = compRegistered [L335] pirp__IoStatus__Status = 0 [L336] myStatus = 0 [L337] COND FALSE !(irp_choice == 0) [L342] CALL stub_driver_init() [L47] s = NP [L48] pended = 0 [L49] compFptr = 0 [L50] compRegistered = 0 [L51] lowerDriverReturn = 0 [L52] setEventCalled = 0 [L53] customIrp = 0 [L342] RET stub_driver_init() [L345] COND FALSE !(status < 0) [L349] int tmp_ndt_1; [L350] tmp_ndt_1 = __VERIFIER_nondet_int() [L351] COND FALSE !(tmp_ndt_1 == 0) [L354] int tmp_ndt_2; [L355] tmp_ndt_2 = __VERIFIER_nondet_int() [L356] COND FALSE !(tmp_ndt_2 == 1) [L359] int tmp_ndt_3; [L360] tmp_ndt_3 = __VERIFIER_nondet_int() [L361] COND TRUE tmp_ndt_3 == 3 [L388] CALL, EXPR KbFilter_PnP(devobj, pirp) [L80] int devExt ; [L81] int irpStack ; [L82] int status ; [L83] int event = __VERIFIER_nondet_int() ; [L84] int DeviceObject__DeviceExtension = __VERIFIER_nondet_int() ; [L85] int Irp__Tail__Overlay__CurrentStackLocation = __VERIFIER_nondet_int() ; [L86] int irpStack__MinorFunction = __VERIFIER_nondet_int() ; [L87] int devExt__TopOfStack = __VERIFIER_nondet_int() ; [L88] int devExt__Started ; [L89] int devExt__Removed ; [L90] int devExt__SurpriseRemoved ; [L91] int Irp__IoStatus__Status ; [L92] int Irp__IoStatus__Information ; [L93] int Irp__CurrentLocation = __VERIFIER_nondet_int() ; [L94] int irpSp ; [L95] int nextIrpSp ; [L96] int nextIrpSp__Control ; [L97] int irpSp___0 ; [L98] int irpSp__Context ; [L99] int irpSp__Control ; [L100] long __cil_tmp23 ; [L103] status = 0 [L104] devExt = DeviceObject__DeviceExtension [L105] irpStack = Irp__Tail__Overlay__CurrentStackLocation [L106] COND FALSE !(irpStack__MinorFunction == 0) [L109] COND FALSE !(irpStack__MinorFunction == 23) [L112] COND TRUE irpStack__MinorFunction == 2 [L236] devExt__Removed = 1 [L237] COND TRUE s == NP [L238] s = SKIP1 [L245] Irp__CurrentLocation ++ [L246] Irp__Tail__Overlay__CurrentStackLocation ++ [L247] CALL IofCallDriver(devExt__TopOfStack, Irp) [L483] int returnVal2 ; [L484] int compRetStatus ; [L485] int lcontext = __VERIFIER_nondet_int() ; [L486] long long __cil_tmp7 ; [L489] COND FALSE !(\read(compRegistered)) [L502] int tmp_ndt_6; [L503] tmp_ndt_6 = __VERIFIER_nondet_int() [L504] COND FALSE !(tmp_ndt_6 == 0) [L507] int tmp_ndt_7; [L508] tmp_ndt_7 = __VERIFIER_nondet_int() [L509] COND TRUE tmp_ndt_7 == 1 [L518] returnVal2 = -1073741823 [L528] COND FALSE !(s == NP) [L532] COND FALSE !(s == MPR1) [L541] COND TRUE s == SKIP1 [L542] s = SKIP2 [L543] lowerDriverReturn = returnVal2 [L551] return (returnVal2); [L247] RET IofCallDriver(devExt__TopOfStack, Irp) [L248] status = 0 [L290] return (status); [L388] RET, EXPR KbFilter_PnP(devobj, pirp) [L388] status = KbFilter_PnP(devobj, pirp) [L412] COND FALSE !(pended == 1) [L420] COND FALSE !(pended == 1) [L428] COND TRUE s != UNLOADED [L429] COND TRUE status != -1 [L430] COND FALSE !(s != SKIP2) [L440] COND FALSE !(pended == 1) [L447] COND FALSE !(s == DC) [L452] COND TRUE status != lowerDriverReturn [L453] CALL errorFn() [L1013] reach_error() - StatisticsResult: Ultimate Automizer benchmark data CFG has 19 procedures, 243 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 79.5s, OverallIterations: 23, TraceHistogramMax: 1, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 57.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 10321 SdHoareTripleChecker+Valid, 16.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 10301 mSDsluCounter, 12821 SdHoareTripleChecker+Invalid, 16.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 7683 mSDsCounter, 1995 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 15376 IncrementalHoareTripleChecker+Invalid, 17371 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1995 mSolverCounterUnsat, 5138 mSDtfsCounter, 15376 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 468 GetRequests, 198 SyntacticMatches, 1 SemanticMatches, 269 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 447 ImplicationChecksByTransitivity, 4.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=344occurred in iteration=3, InterpolantAutomatonStates: 230, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 6.7s AutomataMinimizationTime, 22 MinimizatonAttempts, 227 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: No data available, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2022-04-08 14:47:56,419 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request...