/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationQvasr_64.epf -i ../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-e106359-m [2022-04-15 17:41:23,157 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-04-15 17:41:23,158 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-04-15 17:41:23,190 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-04-15 17:41:23,190 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-04-15 17:41:23,192 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-04-15 17:41:23,194 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-04-15 17:41:23,197 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-04-15 17:41:23,199 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-04-15 17:41:23,202 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-04-15 17:41:23,203 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-04-15 17:41:23,204 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-04-15 17:41:23,204 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-04-15 17:41:23,205 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-04-15 17:41:23,206 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-04-15 17:41:23,208 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-04-15 17:41:23,208 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-04-15 17:41:23,209 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-04-15 17:41:23,210 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-04-15 17:41:23,214 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-04-15 17:41:23,215 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-04-15 17:41:23,216 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-04-15 17:41:23,217 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-04-15 17:41:23,217 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-04-15 17:41:23,218 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-04-15 17:41:23,222 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-04-15 17:41:23,223 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-04-15 17:41:23,223 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-04-15 17:41:23,224 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-04-15 17:41:23,224 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-04-15 17:41:23,225 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-04-15 17:41:23,225 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-04-15 17:41:23,226 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-04-15 17:41:23,226 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-04-15 17:41:23,227 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-04-15 17:41:23,227 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-04-15 17:41:23,227 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-04-15 17:41:23,228 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-04-15 17:41:23,228 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-04-15 17:41:23,228 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-04-15 17:41:23,229 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-04-15 17:41:23,230 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-04-15 17:41:23,230 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationQvasr_64.epf [2022-04-15 17:41:23,240 INFO L113 SettingsManager]: Loading preferences was successful [2022-04-15 17:41:23,240 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-04-15 17:41:23,241 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-04-15 17:41:23,241 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-04-15 17:41:23,241 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-04-15 17:41:23,241 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-04-15 17:41:23,241 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-04-15 17:41:23,241 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-04-15 17:41:23,241 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-04-15 17:41:23,242 INFO L138 SettingsManager]: * Use constant arrays=true [2022-04-15 17:41:23,242 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-04-15 17:41:23,242 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-04-15 17:41:23,242 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-04-15 17:41:23,242 INFO L138 SettingsManager]: * To the following directory=./dump/ [2022-04-15 17:41:23,242 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-04-15 17:41:23,243 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-15 17:41:23,243 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-04-15 17:41:23,243 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=Craig_NestedInterpolation [2022-04-15 17:41:23,243 INFO L138 SettingsManager]: * Trace refinement strategy=ACCELERATED_INTERPOLATION [2022-04-15 17:41:23,243 INFO L138 SettingsManager]: * Trace refinement strategy used in Accelerated Interpolation=CAMEL [2022-04-15 17:41:23,243 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-04-15 17:41:23,243 INFO L138 SettingsManager]: * Loop acceleration method that is used by accelerated interpolation=QVASR [2022-04-15 17:41:23,243 INFO L138 SettingsManager]: * Use separate solver for trace checks=false WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-04-15 17:41:23,439 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-04-15 17:41:23,462 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-04-15 17:41:23,464 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-04-15 17:41:23,465 INFO L271 PluginConnector]: Initializing CDTParser... [2022-04-15 17:41:23,465 INFO L275 PluginConnector]: CDTParser initialized [2022-04-15 17:41:23,466 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c [2022-04-15 17:41:23,509 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/90d987bf7/b1ba380fb525464daccf69d6495bd4e9/FLAG289b44e11 [2022-04-15 17:41:23,895 INFO L306 CDTParser]: Found 1 translation units. [2022-04-15 17:41:23,896 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c [2022-04-15 17:41:23,909 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/90d987bf7/b1ba380fb525464daccf69d6495bd4e9/FLAG289b44e11 [2022-04-15 17:41:23,923 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/90d987bf7/b1ba380fb525464daccf69d6495bd4e9 [2022-04-15 17:41:23,925 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-04-15 17:41:23,927 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2022-04-15 17:41:23,929 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-04-15 17:41:23,929 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-04-15 17:41:23,931 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-04-15 17:41:23,932 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.04 05:41:23" (1/1) ... [2022-04-15 17:41:23,933 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@45ff5a54 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.04 05:41:23, skipping insertion in model container [2022-04-15 17:41:23,933 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.04 05:41:23" (1/1) ... [2022-04-15 17:41:23,938 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-04-15 17:41:23,979 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-04-15 17:41:24,206 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c[29656,29669] [2022-04-15 17:41:24,208 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-15 17:41:24,214 INFO L203 MainTranslator]: Completed pre-run [2022-04-15 17:41:24,264 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c[29656,29669] [2022-04-15 17:41:24,264 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-15 17:41:24,274 INFO L208 MainTranslator]: Completed translation [2022-04-15 17:41:24,274 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.04 05:41:24 WrapperNode [2022-04-15 17:41:24,274 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-04-15 17:41:24,275 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-04-15 17:41:24,275 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-04-15 17:41:24,275 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-04-15 17:41:24,287 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.04 05:41:24" (1/1) ... [2022-04-15 17:41:24,287 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.04 05:41:24" (1/1) ... [2022-04-15 17:41:24,295 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.04 05:41:24" (1/1) ... [2022-04-15 17:41:24,296 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.04 05:41:24" (1/1) ... [2022-04-15 17:41:24,312 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.04 05:41:24" (1/1) ... [2022-04-15 17:41:24,326 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.04 05:41:24" (1/1) ... [2022-04-15 17:41:24,328 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.04 05:41:24" (1/1) ... [2022-04-15 17:41:24,332 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-04-15 17:41:24,333 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-04-15 17:41:24,333 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-04-15 17:41:24,333 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-04-15 17:41:24,334 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.04 05:41:24" (1/1) ... [2022-04-15 17:41:24,338 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-15 17:41:24,349 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-15 17:41:24,360 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-04-15 17:41:24,365 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-04-15 17:41:24,391 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2022-04-15 17:41:24,392 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-04-15 17:41:24,392 INFO L138 BoogieDeclarations]: Found implementation of procedure reach_error [2022-04-15 17:41:24,392 INFO L138 BoogieDeclarations]: Found implementation of procedure stub_driver_init [2022-04-15 17:41:24,392 INFO L138 BoogieDeclarations]: Found implementation of procedure _BLAST_init [2022-04-15 17:41:24,392 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_PnP [2022-04-15 17:41:24,393 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2022-04-15 17:41:24,393 INFO L138 BoogieDeclarations]: Found implementation of procedure stubMoreProcessingRequired [2022-04-15 17:41:24,393 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2022-04-15 17:41:24,393 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2022-04-15 17:41:24,393 INFO L138 BoogieDeclarations]: Found implementation of procedure KeSetEvent [2022-04-15 17:41:24,394 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2022-04-15 17:41:24,394 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Complete [2022-04-15 17:41:24,394 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_CreateClose [2022-04-15 17:41:24,394 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_DispatchPassThrough [2022-04-15 17:41:24,396 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Power [2022-04-15 17:41:24,396 INFO L138 BoogieDeclarations]: Found implementation of procedure PoCallDriver [2022-04-15 17:41:24,396 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_InternIoCtl [2022-04-15 17:41:24,396 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2022-04-15 17:41:24,396 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2022-04-15 17:41:24,396 INFO L130 BoogieDeclarations]: Found specification of procedure __assert_fail [2022-04-15 17:41:24,396 INFO L130 BoogieDeclarations]: Found specification of procedure reach_error [2022-04-15 17:41:24,396 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-04-15 17:41:24,396 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_char [2022-04-15 17:41:24,396 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2022-04-15 17:41:24,396 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2022-04-15 17:41:24,396 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_PnP [2022-04-15 17:41:24,396 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2022-04-15 17:41:24,396 INFO L130 BoogieDeclarations]: Found specification of procedure KeSetEvent [2022-04-15 17:41:24,396 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2022-04-15 17:41:24,396 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Complete [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_CreateClose [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_DispatchPassThrough [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Power [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure PoCallDriver [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_InternIoCtl [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure stub_driver_init [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure _BLAST_init [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure main [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure stubMoreProcessingRequired [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-04-15 17:41:24,397 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-04-15 17:41:24,540 INFO L234 CfgBuilder]: Building ICFG [2022-04-15 17:41:24,542 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-04-15 17:41:24,641 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-15 17:41:24,760 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##18: assume false; [2022-04-15 17:41:24,760 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##19: assume !false; [2022-04-15 17:41:24,767 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-15 17:41:24,814 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-15 17:41:24,814 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-15 17:41:24,912 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-15 17:41:24,925 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##16: assume !false; [2022-04-15 17:41:24,926 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##15: assume false; [2022-04-15 17:41:24,934 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-15 17:41:25,032 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##43: assume false; [2022-04-15 17:41:25,033 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##44: assume !false; [2022-04-15 17:41:25,037 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-15 17:41:25,068 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##10: assume !false; [2022-04-15 17:41:25,069 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##9: assume false; [2022-04-15 17:41:25,074 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-15 17:41:25,096 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-15 17:41:25,096 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-15 17:41:25,137 INFO L275 CfgBuilder]: Performing block encoding [2022-04-15 17:41:25,146 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-04-15 17:41:25,146 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-04-15 17:41:25,148 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.04 05:41:25 BoogieIcfgContainer [2022-04-15 17:41:25,148 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-04-15 17:41:25,151 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-04-15 17:41:25,151 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-04-15 17:41:25,154 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-04-15 17:41:25,154 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 15.04 05:41:23" (1/3) ... [2022-04-15 17:41:25,155 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3e047372 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.04 05:41:25, skipping insertion in model container [2022-04-15 17:41:25,155 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.04 05:41:24" (2/3) ... [2022-04-15 17:41:25,156 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3e047372 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.04 05:41:25, skipping insertion in model container [2022-04-15 17:41:25,156 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.04 05:41:25" (3/3) ... [2022-04-15 17:41:25,157 INFO L111 eAbstractionObserver]: Analyzing ICFG kbfiltr_simpl2.cil-2.c [2022-04-15 17:41:25,161 INFO L202 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:Craig_NestedInterpolation Determinization: PREDICATE_ABSTRACTION [2022-04-15 17:41:25,162 INFO L161 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-04-15 17:41:25,194 INFO L339 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-04-15 17:41:25,198 INFO L340 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=Craig_NestedInterpolation, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP [2022-04-15 17:41:25,199 INFO L341 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-04-15 17:41:25,229 INFO L276 IsEmpty]: Start isEmpty. Operand has 240 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 200 states have internal predecessors, (284), 39 states have call successors, (39), 17 states have call predecessors, (39), 17 states have return successors, (39), 37 states have call predecessors, (39), 39 states have call successors, (39) [2022-04-15 17:41:25,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-04-15 17:41:25,235 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:41:25,236 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:41:25,236 INFO L403 AbstractCegarLoop]: === Iteration 1 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:41:25,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:41:25,240 INFO L85 PathProgramCache]: Analyzing trace with hash -1235546278, now seen corresponding path program 1 times [2022-04-15 17:41:25,247 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:25,247 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1280683414] [2022-04-15 17:41:25,256 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:41:25,256 INFO L85 PathProgramCache]: Analyzing trace with hash -1235546278, now seen corresponding path program 2 times [2022-04-15 17:41:25,258 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:41:25,259 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [920627139] [2022-04-15 17:41:25,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:41:25,259 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:41:25,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:25,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:41:25,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:25,593 INFO L290 TraceCheckUtils]: 0: Hoare triple {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {243#true} is VALID [2022-04-15 17:41:25,594 INFO L290 TraceCheckUtils]: 1: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-15 17:41:25,594 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {243#true} {243#true} #783#return; {243#true} is VALID [2022-04-15 17:41:25,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:41:25,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:25,641 INFO L290 TraceCheckUtils]: 0: Hoare triple {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {243#true} is VALID [2022-04-15 17:41:25,641 INFO L290 TraceCheckUtils]: 1: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-15 17:41:25,642 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {243#true} {248#(= main_~status~1 0)} #715#return; {248#(= main_~status~1 0)} is VALID [2022-04-15 17:41:25,644 INFO L272 TraceCheckUtils]: 0: Hoare triple {243#true} call ULTIMATE.init(); {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:41:25,644 INFO L290 TraceCheckUtils]: 1: Hoare triple {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {243#true} is VALID [2022-04-15 17:41:25,644 INFO L290 TraceCheckUtils]: 2: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-15 17:41:25,645 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {243#true} {243#true} #783#return; {243#true} is VALID [2022-04-15 17:41:25,645 INFO L272 TraceCheckUtils]: 4: Hoare triple {243#true} call #t~ret81 := main(); {243#true} is VALID [2022-04-15 17:41:25,645 INFO L290 TraceCheckUtils]: 5: Hoare triple {243#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {248#(= main_~status~1 0)} is VALID [2022-04-15 17:41:25,647 INFO L272 TraceCheckUtils]: 6: Hoare triple {248#(= main_~status~1 0)} call _BLAST_init(); {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:25,647 INFO L290 TraceCheckUtils]: 7: Hoare triple {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {243#true} is VALID [2022-04-15 17:41:25,647 INFO L290 TraceCheckUtils]: 8: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-15 17:41:25,647 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {243#true} {248#(= main_~status~1 0)} #715#return; {248#(= main_~status~1 0)} is VALID [2022-04-15 17:41:25,648 INFO L290 TraceCheckUtils]: 10: Hoare triple {248#(= main_~status~1 0)} assume !(~status~1 >= 0); {244#false} is VALID [2022-04-15 17:41:25,648 INFO L290 TraceCheckUtils]: 11: Hoare triple {244#false} assume !(1 == ~pended~0); {244#false} is VALID [2022-04-15 17:41:25,649 INFO L290 TraceCheckUtils]: 12: Hoare triple {244#false} assume !(1 == ~pended~0); {244#false} is VALID [2022-04-15 17:41:25,650 INFO L290 TraceCheckUtils]: 13: Hoare triple {244#false} assume ~s~0 != ~UNLOADED~0; {244#false} is VALID [2022-04-15 17:41:25,650 INFO L290 TraceCheckUtils]: 14: Hoare triple {244#false} assume -1 != ~status~1; {244#false} is VALID [2022-04-15 17:41:25,650 INFO L290 TraceCheckUtils]: 15: Hoare triple {244#false} assume !(~s~0 != ~SKIP2~0); {244#false} is VALID [2022-04-15 17:41:25,650 INFO L290 TraceCheckUtils]: 16: Hoare triple {244#false} assume 1 == ~pended~0; {244#false} is VALID [2022-04-15 17:41:25,650 INFO L290 TraceCheckUtils]: 17: Hoare triple {244#false} assume 259 != ~status~1; {244#false} is VALID [2022-04-15 17:41:25,651 INFO L272 TraceCheckUtils]: 18: Hoare triple {244#false} call errorFn(); {244#false} is VALID [2022-04-15 17:41:25,651 INFO L290 TraceCheckUtils]: 19: Hoare triple {244#false} assume !false; {244#false} is VALID [2022-04-15 17:41:25,651 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:41:25,652 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:41:25,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [920627139] [2022-04-15 17:41:25,652 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [920627139] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:25,653 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:25,653 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-15 17:41:25,655 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:41:25,656 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1280683414] [2022-04-15 17:41:25,658 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1280683414] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:25,658 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:25,661 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-15 17:41:25,662 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1621398375] [2022-04-15 17:41:25,662 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:41:25,666 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-15 17:41:25,667 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:41:25,669 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-15 17:41:25,690 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:25,690 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-04-15 17:41:25,690 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:25,702 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-04-15 17:41:25,703 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-15 17:41:25,706 INFO L87 Difference]: Start difference. First operand has 240 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 200 states have internal predecessors, (284), 39 states have call successors, (39), 17 states have call predecessors, (39), 17 states have return successors, (39), 37 states have call predecessors, (39), 39 states have call successors, (39) Second operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-15 17:41:27,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:27,235 INFO L93 Difference]: Finished difference Result 417 states and 628 transitions. [2022-04-15 17:41:27,235 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-04-15 17:41:27,236 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-15 17:41:27,236 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:41:27,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-15 17:41:27,255 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 628 transitions. [2022-04-15 17:41:27,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-15 17:41:27,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 628 transitions. [2022-04-15 17:41:27,265 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 5 states and 628 transitions. [2022-04-15 17:41:27,811 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 628 edges. 628 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:27,825 INFO L225 Difference]: With dead ends: 417 [2022-04-15 17:41:27,825 INFO L226 Difference]: Without dead ends: 259 [2022-04-15 17:41:27,828 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-15 17:41:27,830 INFO L913 BasicCegarLoop]: 297 mSDtfsCounter, 328 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 410 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 334 SdHoareTripleChecker+Valid, 444 SdHoareTripleChecker+Invalid, 491 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 410 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-15 17:41:27,831 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [334 Valid, 444 Invalid, 491 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 410 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-15 17:41:27,842 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-04-15 17:41:27,870 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 231. [2022-04-15 17:41:27,870 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:41:27,872 INFO L82 GeneralOperation]: Start isEquivalent. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-15 17:41:27,873 INFO L74 IsIncluded]: Start isIncluded. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-15 17:41:27,874 INFO L87 Difference]: Start difference. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-15 17:41:27,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:27,884 INFO L93 Difference]: Finished difference Result 259 states and 367 transitions. [2022-04-15 17:41:27,884 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 367 transitions. [2022-04-15 17:41:27,886 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:27,886 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:27,887 INFO L74 IsIncluded]: Start isIncluded. First operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 259 states. [2022-04-15 17:41:27,888 INFO L87 Difference]: Start difference. First operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 259 states. [2022-04-15 17:41:27,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:27,897 INFO L93 Difference]: Finished difference Result 259 states and 367 transitions. [2022-04-15 17:41:27,897 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 367 transitions. [2022-04-15 17:41:27,898 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:27,898 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:27,898 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:41:27,898 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:41:27,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-15 17:41:27,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 326 transitions. [2022-04-15 17:41:27,908 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 326 transitions. Word has length 20 [2022-04-15 17:41:27,908 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:41:27,909 INFO L478 AbstractCegarLoop]: Abstraction has 231 states and 326 transitions. [2022-04-15 17:41:27,909 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-15 17:41:27,909 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 231 states and 326 transitions. [2022-04-15 17:41:28,197 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 326 edges. 326 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:28,197 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 326 transitions. [2022-04-15 17:41:28,197 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-15 17:41:28,198 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:41:28,198 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:41:28,198 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-04-15 17:41:28,198 INFO L403 AbstractCegarLoop]: === Iteration 2 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:41:28,199 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:41:28,199 INFO L85 PathProgramCache]: Analyzing trace with hash -225403307, now seen corresponding path program 1 times [2022-04-15 17:41:28,200 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:28,200 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1020366043] [2022-04-15 17:41:28,201 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:41:28,201 INFO L85 PathProgramCache]: Analyzing trace with hash -225403307, now seen corresponding path program 2 times [2022-04-15 17:41:28,201 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:41:28,202 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2125242103] [2022-04-15 17:41:28,202 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:41:28,202 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:41:28,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:28,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:41:28,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:28,332 INFO L290 TraceCheckUtils]: 0: Hoare triple {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-15 17:41:28,333 INFO L290 TraceCheckUtils]: 1: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-15 17:41:28,333 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2070#true} {2070#true} #783#return; {2070#true} is VALID [2022-04-15 17:41:28,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:41:28,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:28,360 INFO L290 TraceCheckUtils]: 0: Hoare triple {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2070#true} is VALID [2022-04-15 17:41:28,360 INFO L290 TraceCheckUtils]: 1: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-15 17:41:28,360 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2070#true} {2070#true} #715#return; {2070#true} is VALID [2022-04-15 17:41:28,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:41:28,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:28,376 INFO L290 TraceCheckUtils]: 0: Hoare triple {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,376 INFO L290 TraceCheckUtils]: 1: Hoare triple {2081#(= ~s~0 ~NP~0)} assume true; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,376 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2081#(= ~s~0 ~NP~0)} {2070#true} #717#return; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,378 INFO L272 TraceCheckUtils]: 0: Hoare triple {2070#true} call ULTIMATE.init(); {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:41:28,378 INFO L290 TraceCheckUtils]: 1: Hoare triple {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-15 17:41:28,378 INFO L290 TraceCheckUtils]: 2: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-15 17:41:28,378 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {2070#true} {2070#true} #783#return; {2070#true} is VALID [2022-04-15 17:41:28,378 INFO L272 TraceCheckUtils]: 4: Hoare triple {2070#true} call #t~ret81 := main(); {2070#true} is VALID [2022-04-15 17:41:28,379 INFO L290 TraceCheckUtils]: 5: Hoare triple {2070#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {2070#true} is VALID [2022-04-15 17:41:28,380 INFO L272 TraceCheckUtils]: 6: Hoare triple {2070#true} call _BLAST_init(); {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:28,380 INFO L290 TraceCheckUtils]: 7: Hoare triple {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2070#true} is VALID [2022-04-15 17:41:28,380 INFO L290 TraceCheckUtils]: 8: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-15 17:41:28,380 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {2070#true} {2070#true} #715#return; {2070#true} is VALID [2022-04-15 17:41:28,380 INFO L290 TraceCheckUtils]: 10: Hoare triple {2070#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-15 17:41:28,380 INFO L290 TraceCheckUtils]: 11: Hoare triple {2070#true} assume !(0 == ~irp_choice~0); {2070#true} is VALID [2022-04-15 17:41:28,381 INFO L272 TraceCheckUtils]: 12: Hoare triple {2070#true} call stub_driver_init(); {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:28,381 INFO L290 TraceCheckUtils]: 13: Hoare triple {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,382 INFO L290 TraceCheckUtils]: 14: Hoare triple {2081#(= ~s~0 ~NP~0)} assume true; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,382 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {2081#(= ~s~0 ~NP~0)} {2070#true} #717#return; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,383 INFO L290 TraceCheckUtils]: 16: Hoare triple {2081#(= ~s~0 ~NP~0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,383 INFO L290 TraceCheckUtils]: 17: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~tmp_ndt_1~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,383 INFO L272 TraceCheckUtils]: 18: Hoare triple {2081#(= ~s~0 ~NP~0)} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,384 INFO L290 TraceCheckUtils]: 19: Hoare triple {2081#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,384 INFO L290 TraceCheckUtils]: 20: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~irpStack__MajorFunction~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,384 INFO L290 TraceCheckUtils]: 21: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,385 INFO L290 TraceCheckUtils]: 22: Hoare triple {2081#(= ~s~0 ~NP~0)} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,385 INFO L272 TraceCheckUtils]: 23: Hoare triple {2081#(= ~s~0 ~NP~0)} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,386 INFO L290 TraceCheckUtils]: 24: Hoare triple {2081#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-15 17:41:28,386 INFO L290 TraceCheckUtils]: 25: Hoare triple {2081#(= ~s~0 ~NP~0)} assume !(~s~0 == ~NP~0); {2071#false} is VALID [2022-04-15 17:41:28,386 INFO L272 TraceCheckUtils]: 26: Hoare triple {2071#false} call errorFn(); {2071#false} is VALID [2022-04-15 17:41:28,386 INFO L290 TraceCheckUtils]: 27: Hoare triple {2071#false} assume !false; {2071#false} is VALID [2022-04-15 17:41:28,387 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:41:28,387 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:41:28,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2125242103] [2022-04-15 17:41:28,387 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2125242103] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:28,387 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:28,387 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-15 17:41:28,388 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:41:28,388 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1020366043] [2022-04-15 17:41:28,388 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1020366043] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:28,388 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:28,388 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-15 17:41:28,388 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1528123843] [2022-04-15 17:41:28,388 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:41:28,389 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-15 17:41:28,389 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:41:28,389 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:28,409 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:28,409 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-15 17:41:28,409 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:28,410 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-15 17:41:28,410 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-15 17:41:28,410 INFO L87 Difference]: Start difference. First operand 231 states and 326 transitions. Second operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:29,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:29,807 INFO L93 Difference]: Finished difference Result 410 states and 565 transitions. [2022-04-15 17:41:29,807 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-15 17:41:29,808 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-15 17:41:29,808 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:41:29,808 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:29,814 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 565 transitions. [2022-04-15 17:41:29,815 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:29,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 565 transitions. [2022-04-15 17:41:29,821 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 565 transitions. [2022-04-15 17:41:30,328 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 565 edges. 565 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:30,336 INFO L225 Difference]: With dead ends: 410 [2022-04-15 17:41:30,336 INFO L226 Difference]: Without dead ends: 349 [2022-04-15 17:41:30,337 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-15 17:41:30,340 INFO L913 BasicCegarLoop]: 359 mSDtfsCounter, 537 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 378 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 537 SdHoareTripleChecker+Valid, 471 SdHoareTripleChecker+Invalid, 474 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 378 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-15 17:41:30,340 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [537 Valid, 471 Invalid, 474 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 378 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-15 17:41:30,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 349 states. [2022-04-15 17:41:30,367 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 349 to 304. [2022-04-15 17:41:30,367 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:41:30,368 INFO L82 GeneralOperation]: Start isEquivalent. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-15 17:41:30,369 INFO L74 IsIncluded]: Start isIncluded. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-15 17:41:30,369 INFO L87 Difference]: Start difference. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-15 17:41:30,383 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:30,383 INFO L93 Difference]: Finished difference Result 349 states and 477 transitions. [2022-04-15 17:41:30,383 INFO L276 IsEmpty]: Start isEmpty. Operand 349 states and 477 transitions. [2022-04-15 17:41:30,384 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:30,384 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:30,388 INFO L74 IsIncluded]: Start isIncluded. First operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 349 states. [2022-04-15 17:41:30,389 INFO L87 Difference]: Start difference. First operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 349 states. [2022-04-15 17:41:30,400 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:30,400 INFO L93 Difference]: Finished difference Result 349 states and 477 transitions. [2022-04-15 17:41:30,400 INFO L276 IsEmpty]: Start isEmpty. Operand 349 states and 477 transitions. [2022-04-15 17:41:30,401 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:30,401 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:30,401 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:41:30,401 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:41:30,402 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-15 17:41:30,410 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 415 transitions. [2022-04-15 17:41:30,410 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 415 transitions. Word has length 28 [2022-04-15 17:41:30,411 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:41:30,411 INFO L478 AbstractCegarLoop]: Abstraction has 304 states and 415 transitions. [2022-04-15 17:41:30,411 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:30,411 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 304 states and 415 transitions. [2022-04-15 17:41:30,807 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 415 edges. 415 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:30,807 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 415 transitions. [2022-04-15 17:41:30,808 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-15 17:41:30,808 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:41:30,808 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:41:30,808 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-04-15 17:41:30,808 INFO L403 AbstractCegarLoop]: === Iteration 3 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:41:30,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:41:30,808 INFO L85 PathProgramCache]: Analyzing trace with hash -809602478, now seen corresponding path program 1 times [2022-04-15 17:41:30,809 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:30,809 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [430397782] [2022-04-15 17:41:30,809 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:41:30,809 INFO L85 PathProgramCache]: Analyzing trace with hash -809602478, now seen corresponding path program 2 times [2022-04-15 17:41:30,809 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:41:30,809 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1886071315] [2022-04-15 17:41:30,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:41:30,809 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:41:30,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:30,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:41:30,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:30,907 INFO L290 TraceCheckUtils]: 0: Hoare triple {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-15 17:41:30,907 INFO L290 TraceCheckUtils]: 1: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-15 17:41:30,907 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4218#true} {4218#true} #783#return; {4218#true} is VALID [2022-04-15 17:41:30,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:41:30,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:30,927 INFO L290 TraceCheckUtils]: 0: Hoare triple {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4218#true} is VALID [2022-04-15 17:41:30,927 INFO L290 TraceCheckUtils]: 1: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-15 17:41:30,927 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4218#true} {4218#true} #715#return; {4218#true} is VALID [2022-04-15 17:41:30,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:41:30,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:30,947 INFO L290 TraceCheckUtils]: 0: Hoare triple {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,947 INFO L290 TraceCheckUtils]: 1: Hoare triple {4229#(= ~compRegistered~0 0)} assume true; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,947 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4229#(= ~compRegistered~0 0)} {4218#true} #717#return; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,949 INFO L272 TraceCheckUtils]: 0: Hoare triple {4218#true} call ULTIMATE.init(); {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:41:30,949 INFO L290 TraceCheckUtils]: 1: Hoare triple {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-15 17:41:30,949 INFO L290 TraceCheckUtils]: 2: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-15 17:41:30,949 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {4218#true} {4218#true} #783#return; {4218#true} is VALID [2022-04-15 17:41:30,949 INFO L272 TraceCheckUtils]: 4: Hoare triple {4218#true} call #t~ret81 := main(); {4218#true} is VALID [2022-04-15 17:41:30,949 INFO L290 TraceCheckUtils]: 5: Hoare triple {4218#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {4218#true} is VALID [2022-04-15 17:41:30,950 INFO L272 TraceCheckUtils]: 6: Hoare triple {4218#true} call _BLAST_init(); {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:30,950 INFO L290 TraceCheckUtils]: 7: Hoare triple {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4218#true} is VALID [2022-04-15 17:41:30,950 INFO L290 TraceCheckUtils]: 8: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-15 17:41:30,950 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {4218#true} {4218#true} #715#return; {4218#true} is VALID [2022-04-15 17:41:30,951 INFO L290 TraceCheckUtils]: 10: Hoare triple {4218#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-15 17:41:30,951 INFO L290 TraceCheckUtils]: 11: Hoare triple {4218#true} assume !(0 == ~irp_choice~0); {4218#true} is VALID [2022-04-15 17:41:30,951 INFO L272 TraceCheckUtils]: 12: Hoare triple {4218#true} call stub_driver_init(); {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:30,952 INFO L290 TraceCheckUtils]: 13: Hoare triple {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,952 INFO L290 TraceCheckUtils]: 14: Hoare triple {4229#(= ~compRegistered~0 0)} assume true; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,952 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {4229#(= ~compRegistered~0 0)} {4218#true} #717#return; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,953 INFO L290 TraceCheckUtils]: 16: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,956 INFO L290 TraceCheckUtils]: 17: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,956 INFO L290 TraceCheckUtils]: 18: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,957 INFO L290 TraceCheckUtils]: 19: Hoare triple {4229#(= ~compRegistered~0 0)} assume 3 == ~tmp_ndt_3~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,957 INFO L272 TraceCheckUtils]: 20: Hoare triple {4229#(= ~compRegistered~0 0)} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,958 INFO L290 TraceCheckUtils]: 21: Hoare triple {4229#(= ~compRegistered~0 0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,958 INFO L290 TraceCheckUtils]: 22: Hoare triple {4229#(= ~compRegistered~0 0)} assume 0 == ~irpStack__MinorFunction~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,958 INFO L290 TraceCheckUtils]: 23: Hoare triple {4229#(= ~compRegistered~0 0)} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,959 INFO L290 TraceCheckUtils]: 24: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(~s~0 != ~NP~0); {4229#(= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:30,959 INFO L290 TraceCheckUtils]: 25: Hoare triple {4229#(= ~compRegistered~0 0)} assume 0 != ~compRegistered~0; {4219#false} is VALID [2022-04-15 17:41:30,959 INFO L272 TraceCheckUtils]: 26: Hoare triple {4219#false} call errorFn(); {4219#false} is VALID [2022-04-15 17:41:30,959 INFO L290 TraceCheckUtils]: 27: Hoare triple {4219#false} assume !false; {4219#false} is VALID [2022-04-15 17:41:30,960 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:41:30,960 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:41:30,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1886071315] [2022-04-15 17:41:30,960 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1886071315] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:30,961 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:30,961 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-15 17:41:30,961 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:41:30,961 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [430397782] [2022-04-15 17:41:30,961 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [430397782] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:30,961 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:30,961 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-15 17:41:30,962 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [633745269] [2022-04-15 17:41:30,962 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:41:30,963 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-15 17:41:30,963 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:41:30,963 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:30,981 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:30,981 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-15 17:41:30,981 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:30,981 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-15 17:41:30,981 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-15 17:41:30,982 INFO L87 Difference]: Start difference. First operand 304 states and 415 transitions. Second operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:32,349 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:32,349 INFO L93 Difference]: Finished difference Result 487 states and 647 transitions. [2022-04-15 17:41:32,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-15 17:41:32,350 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-15 17:41:32,350 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:41:32,351 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:32,365 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 515 transitions. [2022-04-15 17:41:32,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:32,370 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 515 transitions. [2022-04-15 17:41:32,370 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 515 transitions. [2022-04-15 17:41:32,775 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 515 edges. 515 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:32,783 INFO L225 Difference]: With dead ends: 487 [2022-04-15 17:41:32,783 INFO L226 Difference]: Without dead ends: 368 [2022-04-15 17:41:32,783 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-15 17:41:32,784 INFO L913 BasicCegarLoop]: 267 mSDtfsCounter, 572 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 330 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 572 SdHoareTripleChecker+Valid, 386 SdHoareTripleChecker+Invalid, 431 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 330 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-15 17:41:32,784 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [572 Valid, 386 Invalid, 431 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 330 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-15 17:41:32,785 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 368 states. [2022-04-15 17:41:32,805 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 368 to 344. [2022-04-15 17:41:32,805 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:41:32,805 INFO L82 GeneralOperation]: Start isEquivalent. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-15 17:41:32,806 INFO L74 IsIncluded]: Start isIncluded. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-15 17:41:32,807 INFO L87 Difference]: Start difference. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-15 17:41:32,814 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:32,814 INFO L93 Difference]: Finished difference Result 368 states and 494 transitions. [2022-04-15 17:41:32,815 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 494 transitions. [2022-04-15 17:41:32,815 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:32,815 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:32,816 INFO L74 IsIncluded]: Start isIncluded. First operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 368 states. [2022-04-15 17:41:32,817 INFO L87 Difference]: Start difference. First operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 368 states. [2022-04-15 17:41:32,824 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:32,824 INFO L93 Difference]: Finished difference Result 368 states and 494 transitions. [2022-04-15 17:41:32,825 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 494 transitions. [2022-04-15 17:41:32,825 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:32,825 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:32,825 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:41:32,825 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:41:32,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-15 17:41:32,834 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 466 transitions. [2022-04-15 17:41:32,835 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 466 transitions. Word has length 28 [2022-04-15 17:41:32,835 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:41:32,835 INFO L478 AbstractCegarLoop]: Abstraction has 344 states and 466 transitions. [2022-04-15 17:41:32,835 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:32,835 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 344 states and 466 transitions. [2022-04-15 17:41:33,255 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 466 edges. 466 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:33,255 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 466 transitions. [2022-04-15 17:41:33,256 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-04-15 17:41:33,256 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:41:33,256 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:41:33,256 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-04-15 17:41:33,256 INFO L403 AbstractCegarLoop]: === Iteration 4 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:41:33,257 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:41:33,257 INFO L85 PathProgramCache]: Analyzing trace with hash -1415760533, now seen corresponding path program 1 times [2022-04-15 17:41:33,257 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:33,257 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1744285050] [2022-04-15 17:41:33,257 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:41:33,257 INFO L85 PathProgramCache]: Analyzing trace with hash -1415760533, now seen corresponding path program 2 times [2022-04-15 17:41:33,257 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:41:33,258 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1421112196] [2022-04-15 17:41:33,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:41:33,258 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:41:33,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:33,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:41:33,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:33,400 INFO L290 TraceCheckUtils]: 0: Hoare triple {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-15 17:41:33,400 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-15 17:41:33,401 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #783#return; {6638#true} is VALID [2022-04-15 17:41:33,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:41:33,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:33,431 INFO L290 TraceCheckUtils]: 0: Hoare triple {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-15 17:41:33,432 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-15 17:41:33,432 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #715#return; {6638#true} is VALID [2022-04-15 17:41:33,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:41:33,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:33,453 INFO L290 TraceCheckUtils]: 0: Hoare triple {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-15 17:41:33,453 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-15 17:41:33,453 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #717#return; {6638#true} is VALID [2022-04-15 17:41:33,455 INFO L272 TraceCheckUtils]: 0: Hoare triple {6638#true} call ULTIMATE.init(); {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:41:33,455 INFO L290 TraceCheckUtils]: 1: Hoare triple {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-15 17:41:33,455 INFO L290 TraceCheckUtils]: 2: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-15 17:41:33,455 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {6638#true} {6638#true} #783#return; {6638#true} is VALID [2022-04-15 17:41:33,455 INFO L272 TraceCheckUtils]: 4: Hoare triple {6638#true} call #t~ret81 := main(); {6638#true} is VALID [2022-04-15 17:41:33,455 INFO L290 TraceCheckUtils]: 5: Hoare triple {6638#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {6638#true} is VALID [2022-04-15 17:41:33,457 INFO L272 TraceCheckUtils]: 6: Hoare triple {6638#true} call _BLAST_init(); {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:33,457 INFO L290 TraceCheckUtils]: 7: Hoare triple {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-15 17:41:33,457 INFO L290 TraceCheckUtils]: 8: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-15 17:41:33,457 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {6638#true} {6638#true} #715#return; {6638#true} is VALID [2022-04-15 17:41:33,457 INFO L290 TraceCheckUtils]: 10: Hoare triple {6638#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-15 17:41:33,457 INFO L290 TraceCheckUtils]: 11: Hoare triple {6638#true} assume !(0 == ~irp_choice~0); {6638#true} is VALID [2022-04-15 17:41:33,459 INFO L272 TraceCheckUtils]: 12: Hoare triple {6638#true} call stub_driver_init(); {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:33,459 INFO L290 TraceCheckUtils]: 13: Hoare triple {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-15 17:41:33,460 INFO L290 TraceCheckUtils]: 14: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-15 17:41:33,460 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {6638#true} {6638#true} #717#return; {6638#true} is VALID [2022-04-15 17:41:33,460 INFO L290 TraceCheckUtils]: 16: Hoare triple {6638#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {6638#true} is VALID [2022-04-15 17:41:33,460 INFO L290 TraceCheckUtils]: 17: Hoare triple {6638#true} assume 0 == ~tmp_ndt_1~0; {6638#true} is VALID [2022-04-15 17:41:33,460 INFO L272 TraceCheckUtils]: 18: Hoare triple {6638#true} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {6638#true} is VALID [2022-04-15 17:41:33,460 INFO L290 TraceCheckUtils]: 19: Hoare triple {6638#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {6638#true} is VALID [2022-04-15 17:41:33,460 INFO L290 TraceCheckUtils]: 20: Hoare triple {6638#true} assume 0 == ~irpStack__MajorFunction~0; {6638#true} is VALID [2022-04-15 17:41:33,460 INFO L290 TraceCheckUtils]: 21: Hoare triple {6638#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {6638#true} is VALID [2022-04-15 17:41:33,460 INFO L290 TraceCheckUtils]: 22: Hoare triple {6638#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {6638#true} is VALID [2022-04-15 17:41:33,461 INFO L272 TraceCheckUtils]: 23: Hoare triple {6638#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {6638#true} is VALID [2022-04-15 17:41:33,461 INFO L290 TraceCheckUtils]: 24: Hoare triple {6638#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {6638#true} is VALID [2022-04-15 17:41:33,463 INFO L290 TraceCheckUtils]: 25: Hoare triple {6638#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:33,464 INFO L290 TraceCheckUtils]: 26: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:33,464 INFO L272 TraceCheckUtils]: 27: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:33,465 INFO L290 TraceCheckUtils]: 28: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:33,465 INFO L290 TraceCheckUtils]: 29: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(0 != ~compRegistered~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:33,465 INFO L290 TraceCheckUtils]: 30: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:33,466 INFO L290 TraceCheckUtils]: 31: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume 0 == ~tmp_ndt_6~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:33,466 INFO L290 TraceCheckUtils]: 32: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} ~returnVal2~0 := 0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:33,466 INFO L290 TraceCheckUtils]: 33: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~NP~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:33,467 INFO L290 TraceCheckUtils]: 34: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~MPR1~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:33,467 INFO L290 TraceCheckUtils]: 35: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~SKIP1~0); {6639#false} is VALID [2022-04-15 17:41:33,467 INFO L272 TraceCheckUtils]: 36: Hoare triple {6639#false} call errorFn(); {6639#false} is VALID [2022-04-15 17:41:33,467 INFO L290 TraceCheckUtils]: 37: Hoare triple {6639#false} assume !false; {6639#false} is VALID [2022-04-15 17:41:33,468 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:41:33,468 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:41:33,468 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1421112196] [2022-04-15 17:41:33,468 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1421112196] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:33,468 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:33,468 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-15 17:41:33,468 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:41:33,468 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1744285050] [2022-04-15 17:41:33,468 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1744285050] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:33,468 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:33,468 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-15 17:41:33,468 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [971916987] [2022-04-15 17:41:33,469 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:41:33,469 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-15 17:41:33,469 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:41:33,469 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:33,493 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 38 edges. 38 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:33,493 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-15 17:41:33,493 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:33,494 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-15 17:41:33,494 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-15 17:41:33,495 INFO L87 Difference]: Start difference. First operand 344 states and 466 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:34,916 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:34,916 INFO L93 Difference]: Finished difference Result 347 states and 468 transitions. [2022-04-15 17:41:34,916 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-15 17:41:34,916 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-15 17:41:34,918 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:41:34,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:34,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 338 transitions. [2022-04-15 17:41:34,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:34,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 338 transitions. [2022-04-15 17:41:34,922 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 338 transitions. [2022-04-15 17:41:35,223 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 338 edges. 338 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:35,230 INFO L225 Difference]: With dead ends: 347 [2022-04-15 17:41:35,230 INFO L226 Difference]: Without dead ends: 343 [2022-04-15 17:41:35,230 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-04-15 17:41:35,231 INFO L913 BasicCegarLoop]: 268 mSDtfsCounter, 187 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 593 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 421 SdHoareTripleChecker+Invalid, 628 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 593 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-04-15 17:41:35,231 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [187 Valid, 421 Invalid, 628 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 593 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-04-15 17:41:35,232 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-04-15 17:41:35,249 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2022-04-15 17:41:35,249 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:41:35,250 INFO L82 GeneralOperation]: Start isEquivalent. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-15 17:41:35,250 INFO L74 IsIncluded]: Start isIncluded. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-15 17:41:35,251 INFO L87 Difference]: Start difference. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-15 17:41:35,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:35,258 INFO L93 Difference]: Finished difference Result 343 states and 463 transitions. [2022-04-15 17:41:35,258 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-15 17:41:35,258 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:35,258 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:35,259 INFO L74 IsIncluded]: Start isIncluded. First operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 343 states. [2022-04-15 17:41:35,259 INFO L87 Difference]: Start difference. First operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 343 states. [2022-04-15 17:41:35,266 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:35,266 INFO L93 Difference]: Finished difference Result 343 states and 463 transitions. [2022-04-15 17:41:35,266 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-15 17:41:35,267 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:35,267 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:35,267 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:41:35,267 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:41:35,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-15 17:41:35,275 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 463 transitions. [2022-04-15 17:41:35,275 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 463 transitions. Word has length 38 [2022-04-15 17:41:35,275 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:41:35,276 INFO L478 AbstractCegarLoop]: Abstraction has 343 states and 463 transitions. [2022-04-15 17:41:35,276 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-15 17:41:35,276 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 343 states and 463 transitions. [2022-04-15 17:41:35,694 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 463 edges. 463 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:35,694 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-15 17:41:35,695 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-15 17:41:35,695 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:41:35,695 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:41:35,695 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-04-15 17:41:35,695 INFO L403 AbstractCegarLoop]: === Iteration 5 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:41:35,696 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:41:35,696 INFO L85 PathProgramCache]: Analyzing trace with hash 605107567, now seen corresponding path program 1 times [2022-04-15 17:41:35,696 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:35,696 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1402546096] [2022-04-15 17:41:35,696 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:41:35,696 INFO L85 PathProgramCache]: Analyzing trace with hash 605107567, now seen corresponding path program 2 times [2022-04-15 17:41:35,696 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:41:35,696 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1612742016] [2022-04-15 17:41:35,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:41:35,696 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:41:35,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:35,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:41:35,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:35,791 INFO L290 TraceCheckUtils]: 0: Hoare triple {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-15 17:41:35,791 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-15 17:41:35,791 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #783#return; {8724#true} is VALID [2022-04-15 17:41:35,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:41:35,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:35,820 INFO L290 TraceCheckUtils]: 0: Hoare triple {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-15 17:41:35,820 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-15 17:41:35,820 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #715#return; {8724#true} is VALID [2022-04-15 17:41:35,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:41:35,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:35,852 INFO L290 TraceCheckUtils]: 0: Hoare triple {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-15 17:41:35,852 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-15 17:41:35,852 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #717#return; {8724#true} is VALID [2022-04-15 17:41:35,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-15 17:41:35,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:35,873 INFO L290 TraceCheckUtils]: 0: Hoare triple {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {8724#true} is VALID [2022-04-15 17:41:35,874 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume !(0 != ~compRegistered~0); {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:35,874 INFO L290 TraceCheckUtils]: 2: Hoare triple {8749#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:35,874 INFO L290 TraceCheckUtils]: 3: Hoare triple {8749#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:35,875 INFO L290 TraceCheckUtils]: 4: Hoare triple {8749#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:35,875 INFO L290 TraceCheckUtils]: 5: Hoare triple {8749#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:35,875 INFO L290 TraceCheckUtils]: 6: Hoare triple {8749#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:35,876 INFO L290 TraceCheckUtils]: 7: Hoare triple {8749#(<= ~compRegistered~0 0)} assume true; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:35,876 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {8749#(<= ~compRegistered~0 0)} {8735#(= ~compRegistered~0 1)} #755#return; {8725#false} is VALID [2022-04-15 17:41:35,878 INFO L272 TraceCheckUtils]: 0: Hoare triple {8724#true} call ULTIMATE.init(); {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:41:35,878 INFO L290 TraceCheckUtils]: 1: Hoare triple {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-15 17:41:35,878 INFO L290 TraceCheckUtils]: 2: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-15 17:41:35,878 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {8724#true} {8724#true} #783#return; {8724#true} is VALID [2022-04-15 17:41:35,878 INFO L272 TraceCheckUtils]: 4: Hoare triple {8724#true} call #t~ret81 := main(); {8724#true} is VALID [2022-04-15 17:41:35,878 INFO L290 TraceCheckUtils]: 5: Hoare triple {8724#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {8724#true} is VALID [2022-04-15 17:41:35,888 INFO L272 TraceCheckUtils]: 6: Hoare triple {8724#true} call _BLAST_init(); {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:35,888 INFO L290 TraceCheckUtils]: 7: Hoare triple {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-15 17:41:35,889 INFO L290 TraceCheckUtils]: 8: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-15 17:41:35,889 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {8724#true} {8724#true} #715#return; {8724#true} is VALID [2022-04-15 17:41:35,889 INFO L290 TraceCheckUtils]: 10: Hoare triple {8724#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-15 17:41:35,889 INFO L290 TraceCheckUtils]: 11: Hoare triple {8724#true} assume !(0 == ~irp_choice~0); {8724#true} is VALID [2022-04-15 17:41:35,890 INFO L272 TraceCheckUtils]: 12: Hoare triple {8724#true} call stub_driver_init(); {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:35,890 INFO L290 TraceCheckUtils]: 13: Hoare triple {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-15 17:41:35,890 INFO L290 TraceCheckUtils]: 14: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-15 17:41:35,891 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {8724#true} {8724#true} #717#return; {8724#true} is VALID [2022-04-15 17:41:35,891 INFO L290 TraceCheckUtils]: 16: Hoare triple {8724#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {8724#true} is VALID [2022-04-15 17:41:35,891 INFO L290 TraceCheckUtils]: 17: Hoare triple {8724#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {8724#true} is VALID [2022-04-15 17:41:35,891 INFO L290 TraceCheckUtils]: 18: Hoare triple {8724#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {8724#true} is VALID [2022-04-15 17:41:35,891 INFO L290 TraceCheckUtils]: 19: Hoare triple {8724#true} assume 3 == ~tmp_ndt_3~0; {8724#true} is VALID [2022-04-15 17:41:35,891 INFO L272 TraceCheckUtils]: 20: Hoare triple {8724#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {8724#true} is VALID [2022-04-15 17:41:35,891 INFO L290 TraceCheckUtils]: 21: Hoare triple {8724#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {8724#true} is VALID [2022-04-15 17:41:35,891 INFO L290 TraceCheckUtils]: 22: Hoare triple {8724#true} assume 0 == ~irpStack__MinorFunction~0; {8724#true} is VALID [2022-04-15 17:41:35,891 INFO L290 TraceCheckUtils]: 23: Hoare triple {8724#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {8724#true} is VALID [2022-04-15 17:41:35,891 INFO L290 TraceCheckUtils]: 24: Hoare triple {8724#true} assume !(~s~0 != ~NP~0); {8724#true} is VALID [2022-04-15 17:41:35,895 INFO L290 TraceCheckUtils]: 25: Hoare triple {8724#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {8735#(= ~compRegistered~0 1)} is VALID [2022-04-15 17:41:35,895 INFO L290 TraceCheckUtils]: 26: Hoare triple {8735#(= ~compRegistered~0 1)} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {8735#(= ~compRegistered~0 1)} is VALID [2022-04-15 17:41:35,896 INFO L272 TraceCheckUtils]: 27: Hoare triple {8735#(= ~compRegistered~0 1)} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:35,896 INFO L290 TraceCheckUtils]: 28: Hoare triple {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {8724#true} is VALID [2022-04-15 17:41:35,897 INFO L290 TraceCheckUtils]: 29: Hoare triple {8724#true} assume !(0 != ~compRegistered~0); {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:35,897 INFO L290 TraceCheckUtils]: 30: Hoare triple {8749#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:35,897 INFO L290 TraceCheckUtils]: 31: Hoare triple {8749#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:35,897 INFO L290 TraceCheckUtils]: 32: Hoare triple {8749#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:35,898 INFO L290 TraceCheckUtils]: 33: Hoare triple {8749#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:35,898 INFO L290 TraceCheckUtils]: 34: Hoare triple {8749#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:35,898 INFO L290 TraceCheckUtils]: 35: Hoare triple {8749#(<= ~compRegistered~0 0)} assume true; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-15 17:41:35,899 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {8749#(<= ~compRegistered~0 0)} {8735#(= ~compRegistered~0 1)} #755#return; {8725#false} is VALID [2022-04-15 17:41:35,899 INFO L290 TraceCheckUtils]: 37: Hoare triple {8725#false} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {8725#false} is VALID [2022-04-15 17:41:35,899 INFO L290 TraceCheckUtils]: 38: Hoare triple {8725#false} assume 259 == ~__cil_tmp23~0; {8725#false} is VALID [2022-04-15 17:41:35,899 INFO L272 TraceCheckUtils]: 39: Hoare triple {8725#false} call #t~ret11 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {8725#false} is VALID [2022-04-15 17:41:35,899 INFO L290 TraceCheckUtils]: 40: Hoare triple {8725#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {8725#false} is VALID [2022-04-15 17:41:35,899 INFO L290 TraceCheckUtils]: 41: Hoare triple {8725#false} assume !(~s~0 == ~MPR3~0); {8725#false} is VALID [2022-04-15 17:41:35,899 INFO L290 TraceCheckUtils]: 42: Hoare triple {8725#false} assume !(1 == ~customIrp~0); {8725#false} is VALID [2022-04-15 17:41:35,900 INFO L290 TraceCheckUtils]: 43: Hoare triple {8725#false} assume ~s~0 == ~MPR3~0; {8725#false} is VALID [2022-04-15 17:41:35,900 INFO L272 TraceCheckUtils]: 44: Hoare triple {8725#false} call errorFn(); {8725#false} is VALID [2022-04-15 17:41:35,900 INFO L290 TraceCheckUtils]: 45: Hoare triple {8725#false} assume !false; {8725#false} is VALID [2022-04-15 17:41:35,900 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:41:35,900 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:41:35,900 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1612742016] [2022-04-15 17:41:35,900 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1612742016] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:35,900 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:35,900 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-15 17:41:35,901 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:41:35,901 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1402546096] [2022-04-15 17:41:35,901 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1402546096] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:35,901 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:35,901 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-15 17:41:35,901 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [439638848] [2022-04-15 17:41:35,901 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:41:35,901 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-15 17:41:35,902 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:41:35,902 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-15 17:41:35,932 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:35,933 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-15 17:41:35,933 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:35,933 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-15 17:41:35,933 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-04-15 17:41:35,933 INFO L87 Difference]: Start difference. First operand 343 states and 463 transitions. Second operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-15 17:41:37,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:37,304 INFO L93 Difference]: Finished difference Result 394 states and 520 transitions. [2022-04-15 17:41:37,304 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-15 17:41:37,304 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-15 17:41:37,305 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:41:37,305 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-15 17:41:37,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 425 transitions. [2022-04-15 17:41:37,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-15 17:41:37,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 425 transitions. [2022-04-15 17:41:37,311 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 425 transitions. [2022-04-15 17:41:37,680 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 425 edges. 425 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:37,686 INFO L225 Difference]: With dead ends: 394 [2022-04-15 17:41:37,686 INFO L226 Difference]: Without dead ends: 325 [2022-04-15 17:41:37,686 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-04-15 17:41:37,689 INFO L913 BasicCegarLoop]: 306 mSDtfsCounter, 607 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 351 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 607 SdHoareTripleChecker+Valid, 534 SdHoareTripleChecker+Invalid, 443 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 351 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-15 17:41:37,689 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [607 Valid, 534 Invalid, 443 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 351 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-15 17:41:37,691 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-15 17:41:37,787 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 304. [2022-04-15 17:41:37,788 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:41:37,788 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-15 17:41:37,789 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-15 17:41:37,789 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-15 17:41:37,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:37,796 INFO L93 Difference]: Finished difference Result 325 states and 431 transitions. [2022-04-15 17:41:37,796 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 431 transitions. [2022-04-15 17:41:37,796 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:37,796 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:37,797 INFO L74 IsIncluded]: Start isIncluded. First operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 325 states. [2022-04-15 17:41:37,798 INFO L87 Difference]: Start difference. First operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 325 states. [2022-04-15 17:41:37,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:37,804 INFO L93 Difference]: Finished difference Result 325 states and 431 transitions. [2022-04-15 17:41:37,804 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 431 transitions. [2022-04-15 17:41:37,804 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:37,804 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:37,804 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:41:37,804 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:41:37,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-15 17:41:37,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 406 transitions. [2022-04-15 17:41:37,812 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 406 transitions. Word has length 46 [2022-04-15 17:41:37,812 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:41:37,812 INFO L478 AbstractCegarLoop]: Abstraction has 304 states and 406 transitions. [2022-04-15 17:41:37,812 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-15 17:41:37,812 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 304 states and 406 transitions. [2022-04-15 17:41:38,238 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 406 edges. 406 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:38,239 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 406 transitions. [2022-04-15 17:41:38,239 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-04-15 17:41:38,239 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:41:38,240 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:41:38,240 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-04-15 17:41:38,240 INFO L403 AbstractCegarLoop]: === Iteration 6 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:41:38,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:41:38,240 INFO L85 PathProgramCache]: Analyzing trace with hash -447308474, now seen corresponding path program 1 times [2022-04-15 17:41:38,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:38,240 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [499188018] [2022-04-15 17:41:38,241 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:41:38,241 INFO L85 PathProgramCache]: Analyzing trace with hash -447308474, now seen corresponding path program 2 times [2022-04-15 17:41:38,241 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:41:38,241 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [107949237] [2022-04-15 17:41:38,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:41:38,241 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:41:38,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:38,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:41:38,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:38,366 INFO L290 TraceCheckUtils]: 0: Hoare triple {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {10808#true} is VALID [2022-04-15 17:41:38,366 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-15 17:41:38,367 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10808#true} {10808#true} #783#return; {10808#true} is VALID [2022-04-15 17:41:38,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:41:38,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:38,403 INFO L290 TraceCheckUtils]: 0: Hoare triple {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-15 17:41:38,403 INFO L290 TraceCheckUtils]: 1: Hoare triple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-15 17:41:38,403 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {10808#true} #715#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-15 17:41:38,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:41:38,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:38,418 INFO L290 TraceCheckUtils]: 0: Hoare triple {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10808#true} is VALID [2022-04-15 17:41:38,418 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-15 17:41:38,418 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10808#true} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #717#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-15 17:41:38,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-15 17:41:38,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:38,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-15 17:41:38,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:38,503 INFO L290 TraceCheckUtils]: 0: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-15 17:41:38,504 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-15 17:41:38,504 INFO L290 TraceCheckUtils]: 2: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-15 17:41:38,505 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-15 17:41:38,505 INFO L290 TraceCheckUtils]: 0: Hoare triple {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {10808#true} is VALID [2022-04-15 17:41:38,505 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {10808#true} is VALID [2022-04-15 17:41:38,505 INFO L290 TraceCheckUtils]: 2: Hoare triple {10808#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {10808#true} is VALID [2022-04-15 17:41:38,506 INFO L290 TraceCheckUtils]: 3: Hoare triple {10808#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {10808#true} is VALID [2022-04-15 17:41:38,506 INFO L272 TraceCheckUtils]: 4: Hoare triple {10808#true} call IofCompleteRequest(~Irp, 0); {10843#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:38,506 INFO L290 TraceCheckUtils]: 5: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-15 17:41:38,507 INFO L290 TraceCheckUtils]: 6: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-15 17:41:38,507 INFO L290 TraceCheckUtils]: 7: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-15 17:41:38,508 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-15 17:41:38,508 INFO L290 TraceCheckUtils]: 9: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-15 17:41:38,509 INFO L290 TraceCheckUtils]: 10: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-15 17:41:38,510 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #727#return; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-15 17:41:38,511 INFO L272 TraceCheckUtils]: 0: Hoare triple {10808#true} call ULTIMATE.init(); {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:41:38,512 INFO L290 TraceCheckUtils]: 1: Hoare triple {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {10808#true} is VALID [2022-04-15 17:41:38,512 INFO L290 TraceCheckUtils]: 2: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-15 17:41:38,512 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10808#true} {10808#true} #783#return; {10808#true} is VALID [2022-04-15 17:41:38,512 INFO L272 TraceCheckUtils]: 4: Hoare triple {10808#true} call #t~ret81 := main(); {10808#true} is VALID [2022-04-15 17:41:38,512 INFO L290 TraceCheckUtils]: 5: Hoare triple {10808#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {10808#true} is VALID [2022-04-15 17:41:38,513 INFO L272 TraceCheckUtils]: 6: Hoare triple {10808#true} call _BLAST_init(); {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:38,518 INFO L290 TraceCheckUtils]: 7: Hoare triple {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-15 17:41:38,519 INFO L290 TraceCheckUtils]: 8: Hoare triple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-15 17:41:38,520 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {10808#true} #715#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-15 17:41:38,520 INFO L290 TraceCheckUtils]: 10: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-15 17:41:38,521 INFO L290 TraceCheckUtils]: 11: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~irp_choice~0); {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-15 17:41:38,522 INFO L272 TraceCheckUtils]: 12: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call stub_driver_init(); {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:38,522 INFO L290 TraceCheckUtils]: 13: Hoare triple {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10808#true} is VALID [2022-04-15 17:41:38,522 INFO L290 TraceCheckUtils]: 14: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-15 17:41:38,522 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {10808#true} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #717#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-15 17:41:38,522 INFO L290 TraceCheckUtils]: 16: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-15 17:41:38,523 INFO L290 TraceCheckUtils]: 17: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-15 17:41:38,523 INFO L290 TraceCheckUtils]: 18: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-15 17:41:38,524 INFO L290 TraceCheckUtils]: 19: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-15 17:41:38,524 INFO L290 TraceCheckUtils]: 20: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-15 17:41:38,524 INFO L290 TraceCheckUtils]: 21: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume 8 == ~tmp_ndt_5~0; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-15 17:41:38,525 INFO L272 TraceCheckUtils]: 22: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:38,525 INFO L290 TraceCheckUtils]: 23: Hoare triple {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {10808#true} is VALID [2022-04-15 17:41:38,525 INFO L290 TraceCheckUtils]: 24: Hoare triple {10808#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {10808#true} is VALID [2022-04-15 17:41:38,525 INFO L290 TraceCheckUtils]: 25: Hoare triple {10808#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {10808#true} is VALID [2022-04-15 17:41:38,526 INFO L290 TraceCheckUtils]: 26: Hoare triple {10808#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {10808#true} is VALID [2022-04-15 17:41:38,526 INFO L272 TraceCheckUtils]: 27: Hoare triple {10808#true} call IofCompleteRequest(~Irp, 0); {10843#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:38,526 INFO L290 TraceCheckUtils]: 28: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-15 17:41:38,526 INFO L290 TraceCheckUtils]: 29: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-15 17:41:38,527 INFO L290 TraceCheckUtils]: 30: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-15 17:41:38,532 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-15 17:41:38,532 INFO L290 TraceCheckUtils]: 32: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-15 17:41:38,533 INFO L290 TraceCheckUtils]: 33: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-15 17:41:38,534 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #727#return; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-15 17:41:38,534 INFO L290 TraceCheckUtils]: 35: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-15 17:41:38,539 INFO L290 TraceCheckUtils]: 36: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-15 17:41:38,540 INFO L290 TraceCheckUtils]: 37: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-15 17:41:38,540 INFO L290 TraceCheckUtils]: 38: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume ~s~0 != ~UNLOADED~0; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-15 17:41:38,541 INFO L290 TraceCheckUtils]: 39: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -1 != ~status~1; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-15 17:41:38,541 INFO L290 TraceCheckUtils]: 40: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(~s~0 != ~SKIP2~0); {10809#false} is VALID [2022-04-15 17:41:38,541 INFO L290 TraceCheckUtils]: 41: Hoare triple {10809#false} assume 1 == ~pended~0; {10809#false} is VALID [2022-04-15 17:41:38,541 INFO L290 TraceCheckUtils]: 42: Hoare triple {10809#false} assume 259 != ~status~1; {10809#false} is VALID [2022-04-15 17:41:38,541 INFO L272 TraceCheckUtils]: 43: Hoare triple {10809#false} call errorFn(); {10809#false} is VALID [2022-04-15 17:41:38,541 INFO L290 TraceCheckUtils]: 44: Hoare triple {10809#false} assume !false; {10809#false} is VALID [2022-04-15 17:41:38,542 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:41:38,542 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:41:38,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [107949237] [2022-04-15 17:41:38,547 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [107949237] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:38,547 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:38,547 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-15 17:41:38,547 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:41:38,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [499188018] [2022-04-15 17:41:38,547 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [499188018] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:38,548 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:38,548 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-15 17:41:38,548 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2035958170] [2022-04-15 17:41:38,548 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:41:38,548 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-15 17:41:38,548 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:41:38,548 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:38,589 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:38,589 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-15 17:41:38,589 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:38,589 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-15 17:41:38,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-15 17:41:38,590 INFO L87 Difference]: Start difference. First operand 304 states and 406 transitions. Second operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:41,518 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:41,518 INFO L93 Difference]: Finished difference Result 334 states and 440 transitions. [2022-04-15 17:41:41,519 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-15 17:41:41,519 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-15 17:41:41,519 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:41:41,519 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:41,522 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 365 transitions. [2022-04-15 17:41:41,523 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:41,527 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 365 transitions. [2022-04-15 17:41:41,527 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 365 transitions. [2022-04-15 17:41:41,864 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:41,870 INFO L225 Difference]: With dead ends: 334 [2022-04-15 17:41:41,871 INFO L226 Difference]: Without dead ends: 325 [2022-04-15 17:41:41,871 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-15 17:41:41,873 INFO L913 BasicCegarLoop]: 255 mSDtfsCounter, 770 mSDsluCounter, 324 mSDsCounter, 0 mSdLazyCounter, 918 mSolverCounterSat, 150 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 772 SdHoareTripleChecker+Valid, 579 SdHoareTripleChecker+Invalid, 1068 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 150 IncrementalHoareTripleChecker+Valid, 918 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-04-15 17:41:41,873 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [772 Valid, 579 Invalid, 1068 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [150 Valid, 918 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-04-15 17:41:41,874 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-15 17:41:42,097 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 320. [2022-04-15 17:41:42,098 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:41:42,098 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-15 17:41:42,099 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-15 17:41:42,099 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-15 17:41:42,105 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:42,105 INFO L93 Difference]: Finished difference Result 325 states and 429 transitions. [2022-04-15 17:41:42,105 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 429 transitions. [2022-04-15 17:41:42,106 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:42,106 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:42,107 INFO L74 IsIncluded]: Start isIncluded. First operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-15 17:41:42,107 INFO L87 Difference]: Start difference. First operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-15 17:41:42,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:42,113 INFO L93 Difference]: Finished difference Result 325 states and 429 transitions. [2022-04-15 17:41:42,113 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 429 transitions. [2022-04-15 17:41:42,113 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:42,113 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:42,113 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:41:42,113 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:41:42,114 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-15 17:41:42,120 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 425 transitions. [2022-04-15 17:41:42,120 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 425 transitions. Word has length 45 [2022-04-15 17:41:42,121 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:41:42,121 INFO L478 AbstractCegarLoop]: Abstraction has 320 states and 425 transitions. [2022-04-15 17:41:42,121 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:42,121 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 320 states and 425 transitions. [2022-04-15 17:41:42,562 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 425 edges. 425 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:42,562 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 425 transitions. [2022-04-15 17:41:42,563 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-15 17:41:42,563 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:41:42,563 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:41:42,563 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-04-15 17:41:42,563 INFO L403 AbstractCegarLoop]: === Iteration 7 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:41:42,563 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:41:42,563 INFO L85 PathProgramCache]: Analyzing trace with hash -1360970565, now seen corresponding path program 1 times [2022-04-15 17:41:42,564 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:42,564 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1495506243] [2022-04-15 17:41:42,564 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:41:42,564 INFO L85 PathProgramCache]: Analyzing trace with hash -1360970565, now seen corresponding path program 2 times [2022-04-15 17:41:42,564 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:41:42,564 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1515289650] [2022-04-15 17:41:42,564 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:41:42,564 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:41:42,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:42,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:41:42,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:42,663 INFO L290 TraceCheckUtils]: 0: Hoare triple {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12822#true} is VALID [2022-04-15 17:41:42,663 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-15 17:41:42,663 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12822#true} {12822#true} #783#return; {12822#true} is VALID [2022-04-15 17:41:42,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:41:42,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:42,709 INFO L290 TraceCheckUtils]: 0: Hoare triple {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-15 17:41:42,709 INFO L290 TraceCheckUtils]: 1: Hoare triple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-15 17:41:42,709 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {12822#true} #715#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:41:42,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:42,730 INFO L290 TraceCheckUtils]: 0: Hoare triple {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12822#true} is VALID [2022-04-15 17:41:42,730 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-15 17:41:42,730 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12822#true} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #717#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-15 17:41:42,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:42,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-15 17:41:42,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:42,801 INFO L290 TraceCheckUtils]: 0: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-15 17:41:42,802 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-15 17:41:42,802 INFO L290 TraceCheckUtils]: 2: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-15 17:41:42,803 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-15 17:41:42,803 INFO L290 TraceCheckUtils]: 0: Hoare triple {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {12822#true} is VALID [2022-04-15 17:41:42,803 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {12822#true} is VALID [2022-04-15 17:41:42,803 INFO L290 TraceCheckUtils]: 2: Hoare triple {12822#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {12822#true} is VALID [2022-04-15 17:41:42,803 INFO L290 TraceCheckUtils]: 3: Hoare triple {12822#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {12822#true} is VALID [2022-04-15 17:41:42,804 INFO L272 TraceCheckUtils]: 4: Hoare triple {12822#true} call IofCompleteRequest(~Irp, 0); {12857#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:42,804 INFO L290 TraceCheckUtils]: 5: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-15 17:41:42,805 INFO L290 TraceCheckUtils]: 6: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-15 17:41:42,805 INFO L290 TraceCheckUtils]: 7: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-15 17:41:42,806 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-15 17:41:42,806 INFO L290 TraceCheckUtils]: 9: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-15 17:41:42,807 INFO L290 TraceCheckUtils]: 10: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-15 17:41:42,808 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #727#return; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,810 INFO L272 TraceCheckUtils]: 0: Hoare triple {12822#true} call ULTIMATE.init(); {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:41:42,810 INFO L290 TraceCheckUtils]: 1: Hoare triple {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12822#true} is VALID [2022-04-15 17:41:42,810 INFO L290 TraceCheckUtils]: 2: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-15 17:41:42,810 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12822#true} {12822#true} #783#return; {12822#true} is VALID [2022-04-15 17:41:42,810 INFO L272 TraceCheckUtils]: 4: Hoare triple {12822#true} call #t~ret81 := main(); {12822#true} is VALID [2022-04-15 17:41:42,810 INFO L290 TraceCheckUtils]: 5: Hoare triple {12822#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {12822#true} is VALID [2022-04-15 17:41:42,811 INFO L272 TraceCheckUtils]: 6: Hoare triple {12822#true} call _BLAST_init(); {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:42,812 INFO L290 TraceCheckUtils]: 7: Hoare triple {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-15 17:41:42,812 INFO L290 TraceCheckUtils]: 8: Hoare triple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-15 17:41:42,813 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {12822#true} #715#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,813 INFO L290 TraceCheckUtils]: 10: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,814 INFO L290 TraceCheckUtils]: 11: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~irp_choice~0); {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,814 INFO L272 TraceCheckUtils]: 12: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call stub_driver_init(); {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:42,814 INFO L290 TraceCheckUtils]: 13: Hoare triple {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12822#true} is VALID [2022-04-15 17:41:42,814 INFO L290 TraceCheckUtils]: 14: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-15 17:41:42,815 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {12822#true} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #717#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,815 INFO L290 TraceCheckUtils]: 16: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,816 INFO L290 TraceCheckUtils]: 17: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,816 INFO L290 TraceCheckUtils]: 18: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,816 INFO L290 TraceCheckUtils]: 19: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,817 INFO L290 TraceCheckUtils]: 20: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,817 INFO L290 TraceCheckUtils]: 21: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume 8 == ~tmp_ndt_5~0; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,818 INFO L272 TraceCheckUtils]: 22: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:42,818 INFO L290 TraceCheckUtils]: 23: Hoare triple {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {12822#true} is VALID [2022-04-15 17:41:42,818 INFO L290 TraceCheckUtils]: 24: Hoare triple {12822#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {12822#true} is VALID [2022-04-15 17:41:42,818 INFO L290 TraceCheckUtils]: 25: Hoare triple {12822#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {12822#true} is VALID [2022-04-15 17:41:42,818 INFO L290 TraceCheckUtils]: 26: Hoare triple {12822#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {12822#true} is VALID [2022-04-15 17:41:42,819 INFO L272 TraceCheckUtils]: 27: Hoare triple {12822#true} call IofCompleteRequest(~Irp, 0); {12857#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:42,819 INFO L290 TraceCheckUtils]: 28: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-15 17:41:42,819 INFO L290 TraceCheckUtils]: 29: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-15 17:41:42,819 INFO L290 TraceCheckUtils]: 30: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-15 17:41:42,820 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-15 17:41:42,820 INFO L290 TraceCheckUtils]: 32: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-15 17:41:42,820 INFO L290 TraceCheckUtils]: 33: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-15 17:41:42,821 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #727#return; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,822 INFO L290 TraceCheckUtils]: 35: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,822 INFO L290 TraceCheckUtils]: 36: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,822 INFO L290 TraceCheckUtils]: 37: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,839 INFO L290 TraceCheckUtils]: 38: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~UNLOADED~0; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,840 INFO L290 TraceCheckUtils]: 39: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -1 != ~status~1; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,840 INFO L290 TraceCheckUtils]: 40: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~SKIP2~0; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-15 17:41:42,841 INFO L290 TraceCheckUtils]: 41: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(~s~0 != ~IPC~0); {12823#false} is VALID [2022-04-15 17:41:42,841 INFO L290 TraceCheckUtils]: 42: Hoare triple {12823#false} assume 1 == ~pended~0; {12823#false} is VALID [2022-04-15 17:41:42,841 INFO L290 TraceCheckUtils]: 43: Hoare triple {12823#false} assume 259 != ~status~1; {12823#false} is VALID [2022-04-15 17:41:42,841 INFO L272 TraceCheckUtils]: 44: Hoare triple {12823#false} call errorFn(); {12823#false} is VALID [2022-04-15 17:41:42,841 INFO L290 TraceCheckUtils]: 45: Hoare triple {12823#false} assume !false; {12823#false} is VALID [2022-04-15 17:41:42,841 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:41:42,841 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:41:42,841 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1515289650] [2022-04-15 17:41:42,841 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1515289650] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:42,841 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:42,842 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-15 17:41:42,842 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:41:42,842 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1495506243] [2022-04-15 17:41:42,842 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1495506243] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:42,842 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:42,842 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-15 17:41:42,842 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1512690523] [2022-04-15 17:41:42,842 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:41:42,842 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-15 17:41:42,842 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:41:42,843 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:42,876 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:42,876 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-15 17:41:42,877 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:42,877 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-15 17:41:42,877 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-15 17:41:42,877 INFO L87 Difference]: Start difference. First operand 320 states and 425 transitions. Second operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:45,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:45,619 INFO L93 Difference]: Finished difference Result 330 states and 433 transitions. [2022-04-15 17:41:45,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-15 17:41:45,619 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-15 17:41:45,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:41:45,620 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:45,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 358 transitions. [2022-04-15 17:41:45,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:45,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 358 transitions. [2022-04-15 17:41:45,627 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 358 transitions. [2022-04-15 17:41:45,948 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 358 edges. 358 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:45,954 INFO L225 Difference]: With dead ends: 330 [2022-04-15 17:41:45,954 INFO L226 Difference]: Without dead ends: 325 [2022-04-15 17:41:45,955 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-15 17:41:45,955 INFO L913 BasicCegarLoop]: 256 mSDtfsCounter, 521 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 824 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 523 SdHoareTripleChecker+Valid, 533 SdHoareTripleChecker+Invalid, 916 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 824 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-04-15 17:41:45,955 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [523 Valid, 533 Invalid, 916 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 824 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-04-15 17:41:45,956 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-15 17:41:46,379 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 320. [2022-04-15 17:41:46,379 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:41:46,380 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-15 17:41:46,380 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-15 17:41:46,381 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-15 17:41:46,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:46,387 INFO L93 Difference]: Finished difference Result 325 states and 428 transitions. [2022-04-15 17:41:46,387 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 428 transitions. [2022-04-15 17:41:46,387 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:46,387 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:46,388 INFO L74 IsIncluded]: Start isIncluded. First operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-15 17:41:46,388 INFO L87 Difference]: Start difference. First operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-15 17:41:46,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:46,395 INFO L93 Difference]: Finished difference Result 325 states and 428 transitions. [2022-04-15 17:41:46,395 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 428 transitions. [2022-04-15 17:41:46,396 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:46,396 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:46,396 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:41:46,396 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:41:46,396 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-15 17:41:46,404 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 424 transitions. [2022-04-15 17:41:46,404 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 424 transitions. Word has length 46 [2022-04-15 17:41:46,404 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:41:46,404 INFO L478 AbstractCegarLoop]: Abstraction has 320 states and 424 transitions. [2022-04-15 17:41:46,405 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:46,405 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 320 states and 424 transitions. [2022-04-15 17:41:46,841 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 424 edges. 424 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:46,841 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 424 transitions. [2022-04-15 17:41:46,842 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-04-15 17:41:46,842 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:41:46,842 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:41:46,842 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-04-15 17:41:46,842 INFO L403 AbstractCegarLoop]: === Iteration 8 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:41:46,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:41:46,843 INFO L85 PathProgramCache]: Analyzing trace with hash 548356508, now seen corresponding path program 1 times [2022-04-15 17:41:46,843 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:46,843 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1672551227] [2022-04-15 17:41:46,843 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:41:46,843 INFO L85 PathProgramCache]: Analyzing trace with hash 548356508, now seen corresponding path program 2 times [2022-04-15 17:41:46,843 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:41:46,843 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1690132984] [2022-04-15 17:41:46,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:41:46,843 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:41:46,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:46,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:41:46,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:46,913 INFO L290 TraceCheckUtils]: 0: Hoare triple {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-15 17:41:46,914 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-15 17:41:46,914 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #783#return; {14828#true} is VALID [2022-04-15 17:41:46,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:41:46,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:46,933 INFO L290 TraceCheckUtils]: 0: Hoare triple {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-15 17:41:46,934 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-15 17:41:46,934 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #715#return; {14828#true} is VALID [2022-04-15 17:41:46,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:41:46,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:46,945 INFO L290 TraceCheckUtils]: 0: Hoare triple {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-15 17:41:46,945 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-15 17:41:46,945 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #717#return; {14828#true} is VALID [2022-04-15 17:41:46,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-15 17:41:46,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:46,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-15 17:41:46,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:46,970 INFO L290 TraceCheckUtils]: 0: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-15 17:41:46,970 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-15 17:41:46,970 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-15 17:41:46,970 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-15 17:41:46,970 INFO L290 TraceCheckUtils]: 0: Hoare triple {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {14828#true} is VALID [2022-04-15 17:41:46,970 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {14828#true} is VALID [2022-04-15 17:41:46,971 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {14828#true} is VALID [2022-04-15 17:41:46,971 INFO L290 TraceCheckUtils]: 3: Hoare triple {14828#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {14828#true} is VALID [2022-04-15 17:41:46,971 INFO L272 TraceCheckUtils]: 4: Hoare triple {14828#true} call IofCompleteRequest(~Irp, 0); {14860#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:46,971 INFO L290 TraceCheckUtils]: 5: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-15 17:41:46,971 INFO L290 TraceCheckUtils]: 6: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-15 17:41:46,971 INFO L290 TraceCheckUtils]: 7: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-15 17:41:46,971 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-15 17:41:46,971 INFO L290 TraceCheckUtils]: 9: Hoare triple {14828#true} #res := ~status~3; {14828#true} is VALID [2022-04-15 17:41:46,971 INFO L290 TraceCheckUtils]: 10: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-15 17:41:46,972 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {14828#true} {14828#true} #727#return; {14828#true} is VALID [2022-04-15 17:41:46,977 INFO L272 TraceCheckUtils]: 0: Hoare triple {14828#true} call ULTIMATE.init(); {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:41:46,977 INFO L290 TraceCheckUtils]: 1: Hoare triple {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-15 17:41:46,977 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-15 17:41:46,977 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14828#true} {14828#true} #783#return; {14828#true} is VALID [2022-04-15 17:41:46,977 INFO L272 TraceCheckUtils]: 4: Hoare triple {14828#true} call #t~ret81 := main(); {14828#true} is VALID [2022-04-15 17:41:46,977 INFO L290 TraceCheckUtils]: 5: Hoare triple {14828#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {14828#true} is VALID [2022-04-15 17:41:46,978 INFO L272 TraceCheckUtils]: 6: Hoare triple {14828#true} call _BLAST_init(); {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:46,978 INFO L290 TraceCheckUtils]: 7: Hoare triple {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-15 17:41:46,978 INFO L290 TraceCheckUtils]: 8: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-15 17:41:46,978 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {14828#true} {14828#true} #715#return; {14828#true} is VALID [2022-04-15 17:41:46,978 INFO L290 TraceCheckUtils]: 10: Hoare triple {14828#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-15 17:41:46,978 INFO L290 TraceCheckUtils]: 11: Hoare triple {14828#true} assume !(0 == ~irp_choice~0); {14828#true} is VALID [2022-04-15 17:41:46,979 INFO L272 TraceCheckUtils]: 12: Hoare triple {14828#true} call stub_driver_init(); {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:46,979 INFO L290 TraceCheckUtils]: 13: Hoare triple {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-15 17:41:46,979 INFO L290 TraceCheckUtils]: 14: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-15 17:41:46,979 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {14828#true} {14828#true} #717#return; {14828#true} is VALID [2022-04-15 17:41:46,979 INFO L290 TraceCheckUtils]: 16: Hoare triple {14828#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {14828#true} is VALID [2022-04-15 17:41:46,979 INFO L290 TraceCheckUtils]: 17: Hoare triple {14828#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {14828#true} is VALID [2022-04-15 17:41:46,979 INFO L290 TraceCheckUtils]: 18: Hoare triple {14828#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {14828#true} is VALID [2022-04-15 17:41:46,979 INFO L290 TraceCheckUtils]: 19: Hoare triple {14828#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {14828#true} is VALID [2022-04-15 17:41:46,979 INFO L290 TraceCheckUtils]: 20: Hoare triple {14828#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {14828#true} is VALID [2022-04-15 17:41:46,979 INFO L290 TraceCheckUtils]: 21: Hoare triple {14828#true} assume 8 == ~tmp_ndt_5~0; {14828#true} is VALID [2022-04-15 17:41:46,980 INFO L272 TraceCheckUtils]: 22: Hoare triple {14828#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:46,980 INFO L290 TraceCheckUtils]: 23: Hoare triple {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {14828#true} is VALID [2022-04-15 17:41:46,980 INFO L290 TraceCheckUtils]: 24: Hoare triple {14828#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {14828#true} is VALID [2022-04-15 17:41:46,980 INFO L290 TraceCheckUtils]: 25: Hoare triple {14828#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {14828#true} is VALID [2022-04-15 17:41:46,980 INFO L290 TraceCheckUtils]: 26: Hoare triple {14828#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {14828#true} is VALID [2022-04-15 17:41:46,980 INFO L272 TraceCheckUtils]: 27: Hoare triple {14828#true} call IofCompleteRequest(~Irp, 0); {14860#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:46,981 INFO L290 TraceCheckUtils]: 28: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-15 17:41:46,981 INFO L290 TraceCheckUtils]: 29: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-15 17:41:46,981 INFO L290 TraceCheckUtils]: 30: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-15 17:41:46,981 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-15 17:41:46,981 INFO L290 TraceCheckUtils]: 32: Hoare triple {14828#true} #res := ~status~3; {14828#true} is VALID [2022-04-15 17:41:46,981 INFO L290 TraceCheckUtils]: 33: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-15 17:41:46,981 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {14828#true} {14828#true} #727#return; {14828#true} is VALID [2022-04-15 17:41:46,981 INFO L290 TraceCheckUtils]: 35: Hoare triple {14828#true} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {14828#true} is VALID [2022-04-15 17:41:46,981 INFO L290 TraceCheckUtils]: 36: Hoare triple {14828#true} assume !(1 == ~pended~0); {14851#(not (= ~pended~0 1))} is VALID [2022-04-15 17:41:46,981 INFO L290 TraceCheckUtils]: 37: Hoare triple {14851#(not (= ~pended~0 1))} assume !(1 == ~pended~0); {14851#(not (= ~pended~0 1))} is VALID [2022-04-15 17:41:46,982 INFO L290 TraceCheckUtils]: 38: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~UNLOADED~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-15 17:41:46,982 INFO L290 TraceCheckUtils]: 39: Hoare triple {14851#(not (= ~pended~0 1))} assume -1 != ~status~1; {14851#(not (= ~pended~0 1))} is VALID [2022-04-15 17:41:46,982 INFO L290 TraceCheckUtils]: 40: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~SKIP2~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-15 17:41:46,982 INFO L290 TraceCheckUtils]: 41: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~IPC~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-15 17:41:46,983 INFO L290 TraceCheckUtils]: 42: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 == ~DC~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-15 17:41:46,983 INFO L290 TraceCheckUtils]: 43: Hoare triple {14851#(not (= ~pended~0 1))} assume 1 == ~pended~0; {14829#false} is VALID [2022-04-15 17:41:46,983 INFO L290 TraceCheckUtils]: 44: Hoare triple {14829#false} assume 259 != ~status~1; {14829#false} is VALID [2022-04-15 17:41:46,983 INFO L272 TraceCheckUtils]: 45: Hoare triple {14829#false} call errorFn(); {14829#false} is VALID [2022-04-15 17:41:46,983 INFO L290 TraceCheckUtils]: 46: Hoare triple {14829#false} assume !false; {14829#false} is VALID [2022-04-15 17:41:46,985 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:41:46,985 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:41:46,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1690132984] [2022-04-15 17:41:46,985 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1690132984] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:46,985 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:46,985 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-15 17:41:46,985 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:41:46,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1672551227] [2022-04-15 17:41:46,985 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1672551227] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:46,986 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:46,986 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-15 17:41:46,986 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1384321030] [2022-04-15 17:41:46,986 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:41:46,987 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-15 17:41:46,987 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:41:46,987 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:41:47,011 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:47,011 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-15 17:41:47,011 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:47,012 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-15 17:41:47,012 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-04-15 17:41:47,013 INFO L87 Difference]: Start difference. First operand 320 states and 424 transitions. Second operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:41:48,715 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:48,715 INFO L93 Difference]: Finished difference Result 338 states and 446 transitions. [2022-04-15 17:41:48,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-15 17:41:48,715 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-15 17:41:48,715 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:41:48,715 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:41:48,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 346 transitions. [2022-04-15 17:41:48,720 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:41:48,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 346 transitions. [2022-04-15 17:41:48,723 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 346 transitions. [2022-04-15 17:41:49,034 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 346 edges. 346 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:49,040 INFO L225 Difference]: With dead ends: 338 [2022-04-15 17:41:49,041 INFO L226 Difference]: Without dead ends: 272 [2022-04-15 17:41:49,041 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=49, Invalid=83, Unknown=0, NotChecked=0, Total=132 [2022-04-15 17:41:49,042 INFO L913 BasicCegarLoop]: 250 mSDtfsCounter, 724 mSDsluCounter, 177 mSDsCounter, 0 mSdLazyCounter, 415 mSolverCounterSat, 119 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 724 SdHoareTripleChecker+Valid, 427 SdHoareTripleChecker+Invalid, 534 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 119 IncrementalHoareTripleChecker+Valid, 415 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-15 17:41:49,042 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [724 Valid, 427 Invalid, 534 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [119 Valid, 415 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-15 17:41:49,043 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2022-04-15 17:41:49,328 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 242. [2022-04-15 17:41:49,328 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:41:49,329 INFO L82 GeneralOperation]: Start isEquivalent. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:49,329 INFO L74 IsIncluded]: Start isIncluded. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:49,329 INFO L87 Difference]: Start difference. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:49,333 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:49,334 INFO L93 Difference]: Finished difference Result 272 states and 356 transitions. [2022-04-15 17:41:49,334 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 356 transitions. [2022-04-15 17:41:49,334 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:49,334 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:49,335 INFO L74 IsIncluded]: Start isIncluded. First operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 272 states. [2022-04-15 17:41:49,336 INFO L87 Difference]: Start difference. First operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 272 states. [2022-04-15 17:41:49,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:49,341 INFO L93 Difference]: Finished difference Result 272 states and 356 transitions. [2022-04-15 17:41:49,341 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 356 transitions. [2022-04-15 17:41:49,342 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:49,342 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:49,342 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:41:49,342 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:41:49,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:49,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 321 transitions. [2022-04-15 17:41:49,347 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 321 transitions. Word has length 47 [2022-04-15 17:41:49,347 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:41:49,347 INFO L478 AbstractCegarLoop]: Abstraction has 242 states and 321 transitions. [2022-04-15 17:41:49,347 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:41:49,347 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 242 states and 321 transitions. [2022-04-15 17:41:49,707 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 321 edges. 321 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:49,707 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 321 transitions. [2022-04-15 17:41:49,708 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-15 17:41:49,708 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:41:49,708 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:41:49,708 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-04-15 17:41:49,708 INFO L403 AbstractCegarLoop]: === Iteration 9 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:41:49,708 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:41:49,708 INFO L85 PathProgramCache]: Analyzing trace with hash 916659597, now seen corresponding path program 1 times [2022-04-15 17:41:49,708 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:49,708 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1259254270] [2022-04-15 17:41:49,709 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:41:49,709 INFO L85 PathProgramCache]: Analyzing trace with hash 916659597, now seen corresponding path program 2 times [2022-04-15 17:41:49,709 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:41:49,709 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [903092611] [2022-04-15 17:41:49,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:41:49,709 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:41:49,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:49,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:41:49,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:49,806 INFO L290 TraceCheckUtils]: 0: Hoare triple {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-15 17:41:49,806 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-15 17:41:49,807 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #783#return; {16577#true} is VALID [2022-04-15 17:41:49,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:41:49,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:49,835 INFO L290 TraceCheckUtils]: 0: Hoare triple {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-15 17:41:49,836 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-15 17:41:49,836 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #715#return; {16577#true} is VALID [2022-04-15 17:41:49,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:41:49,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:49,851 INFO L290 TraceCheckUtils]: 0: Hoare triple {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-15 17:41:49,851 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-15 17:41:49,851 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #717#return; {16577#true} is VALID [2022-04-15 17:41:49,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-04-15 17:41:49,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:49,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-15 17:41:49,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:49,871 INFO L290 TraceCheckUtils]: 0: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-15 17:41:49,871 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-15 17:41:49,872 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-15 17:41:49,872 INFO L290 TraceCheckUtils]: 0: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16577#true} is VALID [2022-04-15 17:41:49,872 INFO L272 TraceCheckUtils]: 1: Hoare triple {16577#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:41:49,872 INFO L290 TraceCheckUtils]: 2: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-15 17:41:49,872 INFO L290 TraceCheckUtils]: 3: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-15 17:41:49,872 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-15 17:41:49,872 INFO L290 TraceCheckUtils]: 5: Hoare triple {16577#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {16577#true} is VALID [2022-04-15 17:41:49,873 INFO L290 TraceCheckUtils]: 6: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-15 17:41:49,873 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {16577#true} {16577#true} #777#return; {16577#true} is VALID [2022-04-15 17:41:49,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-04-15 17:41:49,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:49,884 INFO L290 TraceCheckUtils]: 0: Hoare triple {16607#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-15 17:41:49,885 INFO L290 TraceCheckUtils]: 1: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-15 17:41:49,885 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {16577#true} #779#return; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-15 17:41:49,887 INFO L272 TraceCheckUtils]: 0: Hoare triple {16577#true} call ULTIMATE.init(); {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:41:49,887 INFO L290 TraceCheckUtils]: 1: Hoare triple {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-15 17:41:49,887 INFO L290 TraceCheckUtils]: 2: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-15 17:41:49,887 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {16577#true} {16577#true} #783#return; {16577#true} is VALID [2022-04-15 17:41:49,887 INFO L272 TraceCheckUtils]: 4: Hoare triple {16577#true} call #t~ret81 := main(); {16577#true} is VALID [2022-04-15 17:41:49,887 INFO L290 TraceCheckUtils]: 5: Hoare triple {16577#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {16577#true} is VALID [2022-04-15 17:41:49,888 INFO L272 TraceCheckUtils]: 6: Hoare triple {16577#true} call _BLAST_init(); {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:49,888 INFO L290 TraceCheckUtils]: 7: Hoare triple {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-15 17:41:49,888 INFO L290 TraceCheckUtils]: 8: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-15 17:41:49,888 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {16577#true} {16577#true} #715#return; {16577#true} is VALID [2022-04-15 17:41:49,888 INFO L290 TraceCheckUtils]: 10: Hoare triple {16577#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-15 17:41:49,888 INFO L290 TraceCheckUtils]: 11: Hoare triple {16577#true} assume !(0 == ~irp_choice~0); {16577#true} is VALID [2022-04-15 17:41:49,889 INFO L272 TraceCheckUtils]: 12: Hoare triple {16577#true} call stub_driver_init(); {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:49,889 INFO L290 TraceCheckUtils]: 13: Hoare triple {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-15 17:41:49,889 INFO L290 TraceCheckUtils]: 14: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-15 17:41:49,889 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16577#true} {16577#true} #717#return; {16577#true} is VALID [2022-04-15 17:41:49,889 INFO L290 TraceCheckUtils]: 16: Hoare triple {16577#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {16577#true} is VALID [2022-04-15 17:41:49,889 INFO L290 TraceCheckUtils]: 17: Hoare triple {16577#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {16577#true} is VALID [2022-04-15 17:41:49,889 INFO L290 TraceCheckUtils]: 18: Hoare triple {16577#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {16577#true} is VALID [2022-04-15 17:41:49,889 INFO L290 TraceCheckUtils]: 19: Hoare triple {16577#true} assume 3 == ~tmp_ndt_3~0; {16577#true} is VALID [2022-04-15 17:41:49,889 INFO L272 TraceCheckUtils]: 20: Hoare triple {16577#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {16577#true} is VALID [2022-04-15 17:41:49,889 INFO L290 TraceCheckUtils]: 21: Hoare triple {16577#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {16577#true} is VALID [2022-04-15 17:41:49,889 INFO L290 TraceCheckUtils]: 22: Hoare triple {16577#true} assume 0 == ~irpStack__MinorFunction~0; {16577#true} is VALID [2022-04-15 17:41:49,889 INFO L290 TraceCheckUtils]: 23: Hoare triple {16577#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {16577#true} is VALID [2022-04-15 17:41:49,889 INFO L290 TraceCheckUtils]: 24: Hoare triple {16577#true} assume !(~s~0 != ~NP~0); {16577#true} is VALID [2022-04-15 17:41:49,890 INFO L290 TraceCheckUtils]: 25: Hoare triple {16577#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {16577#true} is VALID [2022-04-15 17:41:49,890 INFO L290 TraceCheckUtils]: 26: Hoare triple {16577#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {16577#true} is VALID [2022-04-15 17:41:49,890 INFO L272 TraceCheckUtils]: 27: Hoare triple {16577#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {16577#true} is VALID [2022-04-15 17:41:49,890 INFO L290 TraceCheckUtils]: 28: Hoare triple {16577#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {16577#true} is VALID [2022-04-15 17:41:49,890 INFO L290 TraceCheckUtils]: 29: Hoare triple {16577#true} assume 0 != ~compRegistered~0; {16577#true} is VALID [2022-04-15 17:41:49,890 INFO L272 TraceCheckUtils]: 30: Hoare triple {16577#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:41:49,890 INFO L290 TraceCheckUtils]: 31: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16577#true} is VALID [2022-04-15 17:41:49,891 INFO L272 TraceCheckUtils]: 32: Hoare triple {16577#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:41:49,891 INFO L290 TraceCheckUtils]: 33: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-15 17:41:49,891 INFO L290 TraceCheckUtils]: 34: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-15 17:41:49,891 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-15 17:41:49,891 INFO L290 TraceCheckUtils]: 36: Hoare triple {16577#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {16577#true} is VALID [2022-04-15 17:41:49,891 INFO L290 TraceCheckUtils]: 37: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-15 17:41:49,891 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {16577#true} {16577#true} #777#return; {16577#true} is VALID [2022-04-15 17:41:49,891 INFO L290 TraceCheckUtils]: 39: Hoare triple {16577#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {16577#true} is VALID [2022-04-15 17:41:49,891 INFO L290 TraceCheckUtils]: 40: Hoare triple {16577#true} assume -1073741802 == ~__cil_tmp7~0; {16577#true} is VALID [2022-04-15 17:41:49,892 INFO L272 TraceCheckUtils]: 41: Hoare triple {16577#true} call stubMoreProcessingRequired(); {16607#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:49,892 INFO L290 TraceCheckUtils]: 42: Hoare triple {16607#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-15 17:41:49,892 INFO L290 TraceCheckUtils]: 43: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-15 17:41:49,893 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {16577#true} #779#return; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-15 17:41:49,893 INFO L290 TraceCheckUtils]: 45: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-15 17:41:49,893 INFO L290 TraceCheckUtils]: 46: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume 0 == ~tmp_ndt_6~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-15 17:41:49,893 INFO L290 TraceCheckUtils]: 47: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} ~returnVal2~0 := 0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-15 17:41:49,894 INFO L290 TraceCheckUtils]: 48: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~NP~0); {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-15 17:41:49,894 INFO L290 TraceCheckUtils]: 49: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~MPR1~0); {16578#false} is VALID [2022-04-15 17:41:49,894 INFO L290 TraceCheckUtils]: 50: Hoare triple {16578#false} assume !(~s~0 == ~SKIP1~0); {16578#false} is VALID [2022-04-15 17:41:49,894 INFO L272 TraceCheckUtils]: 51: Hoare triple {16578#false} call errorFn(); {16578#false} is VALID [2022-04-15 17:41:49,894 INFO L290 TraceCheckUtils]: 52: Hoare triple {16578#false} assume !false; {16578#false} is VALID [2022-04-15 17:41:49,895 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:41:49,895 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:41:49,895 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [903092611] [2022-04-15 17:41:49,895 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [903092611] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:49,895 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:49,895 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-15 17:41:49,895 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:41:49,895 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1259254270] [2022-04-15 17:41:49,895 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1259254270] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:49,895 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:49,895 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-15 17:41:49,895 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [99710292] [2022-04-15 17:41:49,895 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:41:49,896 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-15 17:41:49,896 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:41:49,896 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:41:49,930 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:49,930 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-15 17:41:49,930 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:49,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-15 17:41:49,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-04-15 17:41:49,931 INFO L87 Difference]: Start difference. First operand 242 states and 321 transitions. Second operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:41:51,326 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:51,326 INFO L93 Difference]: Finished difference Result 270 states and 354 transitions. [2022-04-15 17:41:51,326 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-15 17:41:51,326 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-15 17:41:51,326 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:41:51,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:41:51,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 341 transitions. [2022-04-15 17:41:51,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:41:51,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 341 transitions. [2022-04-15 17:41:51,330 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 341 transitions. [2022-04-15 17:41:51,612 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 341 edges. 341 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:51,616 INFO L225 Difference]: With dead ends: 270 [2022-04-15 17:41:51,616 INFO L226 Difference]: Without dead ends: 240 [2022-04-15 17:41:51,616 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=67, Unknown=0, NotChecked=0, Total=110 [2022-04-15 17:41:51,616 INFO L913 BasicCegarLoop]: 243 mSDtfsCounter, 484 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 347 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 484 SdHoareTripleChecker+Valid, 461 SdHoareTripleChecker+Invalid, 448 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 347 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-15 17:41:51,617 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [484 Valid, 461 Invalid, 448 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 347 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-15 17:41:51,617 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-04-15 17:41:51,950 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 240. [2022-04-15 17:41:51,951 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:41:51,951 INFO L82 GeneralOperation]: Start isEquivalent. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:51,952 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:51,952 INFO L87 Difference]: Start difference. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:51,955 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:51,955 INFO L93 Difference]: Finished difference Result 240 states and 317 transitions. [2022-04-15 17:41:51,955 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-15 17:41:51,956 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:51,956 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:51,957 INFO L74 IsIncluded]: Start isIncluded. First operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-15 17:41:51,957 INFO L87 Difference]: Start difference. First operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-15 17:41:51,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:51,962 INFO L93 Difference]: Finished difference Result 240 states and 317 transitions. [2022-04-15 17:41:51,962 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-15 17:41:51,963 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:51,963 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:51,963 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:41:51,963 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:41:51,963 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:51,967 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 317 transitions. [2022-04-15 17:41:51,968 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 317 transitions. Word has length 53 [2022-04-15 17:41:51,968 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:41:51,968 INFO L478 AbstractCegarLoop]: Abstraction has 240 states and 317 transitions. [2022-04-15 17:41:51,968 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:41:51,968 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 240 states and 317 transitions. [2022-04-15 17:41:52,332 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 317 edges. 317 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:52,332 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-15 17:41:52,333 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-04-15 17:41:52,333 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:41:52,333 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:41:52,333 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-04-15 17:41:52,333 INFO L403 AbstractCegarLoop]: === Iteration 10 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:41:52,333 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:41:52,334 INFO L85 PathProgramCache]: Analyzing trace with hash -1556296422, now seen corresponding path program 1 times [2022-04-15 17:41:52,334 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:52,334 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [710248243] [2022-04-15 17:41:52,334 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:41:52,334 INFO L85 PathProgramCache]: Analyzing trace with hash -1556296422, now seen corresponding path program 2 times [2022-04-15 17:41:52,334 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:41:52,334 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [964992396] [2022-04-15 17:41:52,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:41:52,334 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:41:52,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:52,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:41:52,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:52,409 INFO L290 TraceCheckUtils]: 0: Hoare triple {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18117#true} is VALID [2022-04-15 17:41:52,409 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-15 17:41:52,410 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18117#true} {18117#true} #783#return; {18117#true} is VALID [2022-04-15 17:41:52,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:41:52,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:52,449 INFO L290 TraceCheckUtils]: 0: Hoare triple {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,449 INFO L290 TraceCheckUtils]: 1: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume true; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,450 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18125#(not (= ~SKIP1~0 ~NP~0))} {18117#true} #715#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:41:52,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:52,462 INFO L290 TraceCheckUtils]: 0: Hoare triple {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18117#true} is VALID [2022-04-15 17:41:52,462 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-15 17:41:52,463 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18117#true} {18125#(not (= ~SKIP1~0 ~NP~0))} #717#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-15 17:41:52,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:52,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-15 17:41:52,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:52,513 INFO L290 TraceCheckUtils]: 0: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,513 INFO L290 TraceCheckUtils]: 1: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,513 INFO L290 TraceCheckUtils]: 2: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,514 INFO L290 TraceCheckUtils]: 3: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,514 INFO L290 TraceCheckUtils]: 4: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,514 INFO L290 TraceCheckUtils]: 5: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,514 INFO L290 TraceCheckUtils]: 6: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,515 INFO L290 TraceCheckUtils]: 7: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,515 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-15 17:41:52,515 INFO L290 TraceCheckUtils]: 0: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {18117#true} is VALID [2022-04-15 17:41:52,516 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume 2 == ~irpStack__MinorFunction~1; {18117#true} is VALID [2022-04-15 17:41:52,516 INFO L290 TraceCheckUtils]: 2: Hoare triple {18117#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {18117#true} is VALID [2022-04-15 17:41:52,516 INFO L290 TraceCheckUtils]: 3: Hoare triple {18117#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:52,516 INFO L290 TraceCheckUtils]: 4: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:52,517 INFO L272 TraceCheckUtils]: 5: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:52,517 INFO L290 TraceCheckUtils]: 6: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,517 INFO L290 TraceCheckUtils]: 7: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,517 INFO L290 TraceCheckUtils]: 8: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,518 INFO L290 TraceCheckUtils]: 9: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,518 INFO L290 TraceCheckUtils]: 10: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,518 INFO L290 TraceCheckUtils]: 11: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,518 INFO L290 TraceCheckUtils]: 12: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,518 INFO L290 TraceCheckUtils]: 13: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,519 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-15 17:41:52,519 INFO L290 TraceCheckUtils]: 15: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-15 17:41:52,519 INFO L290 TraceCheckUtils]: 16: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume true; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-15 17:41:52,520 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {18161#(= ~SKIP1~0 ~NP~0)} {18125#(not (= ~SKIP1~0 ~NP~0))} #725#return; {18118#false} is VALID [2022-04-15 17:41:52,521 INFO L272 TraceCheckUtils]: 0: Hoare triple {18117#true} call ULTIMATE.init(); {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:41:52,521 INFO L290 TraceCheckUtils]: 1: Hoare triple {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18117#true} is VALID [2022-04-15 17:41:52,521 INFO L290 TraceCheckUtils]: 2: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-15 17:41:52,521 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {18117#true} {18117#true} #783#return; {18117#true} is VALID [2022-04-15 17:41:52,521 INFO L272 TraceCheckUtils]: 4: Hoare triple {18117#true} call #t~ret81 := main(); {18117#true} is VALID [2022-04-15 17:41:52,521 INFO L290 TraceCheckUtils]: 5: Hoare triple {18117#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {18117#true} is VALID [2022-04-15 17:41:52,522 INFO L272 TraceCheckUtils]: 6: Hoare triple {18117#true} call _BLAST_init(); {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:52,523 INFO L290 TraceCheckUtils]: 7: Hoare triple {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,523 INFO L290 TraceCheckUtils]: 8: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume true; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,523 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {18125#(not (= ~SKIP1~0 ~NP~0))} {18117#true} #715#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,523 INFO L290 TraceCheckUtils]: 10: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,524 INFO L290 TraceCheckUtils]: 11: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(0 == ~irp_choice~0); {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,524 INFO L272 TraceCheckUtils]: 12: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} call stub_driver_init(); {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:52,524 INFO L290 TraceCheckUtils]: 13: Hoare triple {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18117#true} is VALID [2022-04-15 17:41:52,524 INFO L290 TraceCheckUtils]: 14: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-15 17:41:52,525 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {18117#true} {18125#(not (= ~SKIP1~0 ~NP~0))} #717#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,525 INFO L290 TraceCheckUtils]: 16: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,525 INFO L290 TraceCheckUtils]: 17: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,525 INFO L290 TraceCheckUtils]: 18: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,525 INFO L290 TraceCheckUtils]: 19: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,526 INFO L290 TraceCheckUtils]: 20: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume 4 == ~tmp_ndt_4~0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-15 17:41:52,526 INFO L272 TraceCheckUtils]: 21: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:52,526 INFO L290 TraceCheckUtils]: 22: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {18117#true} is VALID [2022-04-15 17:41:52,526 INFO L290 TraceCheckUtils]: 23: Hoare triple {18117#true} assume 2 == ~irpStack__MinorFunction~1; {18117#true} is VALID [2022-04-15 17:41:52,526 INFO L290 TraceCheckUtils]: 24: Hoare triple {18117#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {18117#true} is VALID [2022-04-15 17:41:52,527 INFO L290 TraceCheckUtils]: 25: Hoare triple {18117#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:52,527 INFO L290 TraceCheckUtils]: 26: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:52,527 INFO L272 TraceCheckUtils]: 27: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:52,528 INFO L290 TraceCheckUtils]: 28: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,528 INFO L290 TraceCheckUtils]: 29: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,528 INFO L290 TraceCheckUtils]: 30: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,528 INFO L290 TraceCheckUtils]: 31: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,529 INFO L290 TraceCheckUtils]: 32: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,529 INFO L290 TraceCheckUtils]: 33: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,529 INFO L290 TraceCheckUtils]: 34: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,529 INFO L290 TraceCheckUtils]: 35: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:52,530 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-15 17:41:52,530 INFO L290 TraceCheckUtils]: 37: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-15 17:41:52,530 INFO L290 TraceCheckUtils]: 38: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume true; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-15 17:41:52,531 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {18161#(= ~SKIP1~0 ~NP~0)} {18125#(not (= ~SKIP1~0 ~NP~0))} #725#return; {18118#false} is VALID [2022-04-15 17:41:52,531 INFO L290 TraceCheckUtils]: 40: Hoare triple {18118#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {18118#false} is VALID [2022-04-15 17:41:52,531 INFO L290 TraceCheckUtils]: 41: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-15 17:41:52,531 INFO L290 TraceCheckUtils]: 42: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-15 17:41:52,531 INFO L290 TraceCheckUtils]: 43: Hoare triple {18118#false} assume ~s~0 != ~UNLOADED~0; {18118#false} is VALID [2022-04-15 17:41:52,531 INFO L290 TraceCheckUtils]: 44: Hoare triple {18118#false} assume -1 != ~status~1; {18118#false} is VALID [2022-04-15 17:41:52,531 INFO L290 TraceCheckUtils]: 45: Hoare triple {18118#false} assume !(~s~0 != ~SKIP2~0); {18118#false} is VALID [2022-04-15 17:41:52,531 INFO L290 TraceCheckUtils]: 46: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-15 17:41:52,531 INFO L290 TraceCheckUtils]: 47: Hoare triple {18118#false} assume !(~s~0 == ~DC~0); {18118#false} is VALID [2022-04-15 17:41:52,531 INFO L290 TraceCheckUtils]: 48: Hoare triple {18118#false} assume ~status~1 != ~lowerDriverReturn~0; {18118#false} is VALID [2022-04-15 17:41:52,531 INFO L272 TraceCheckUtils]: 49: Hoare triple {18118#false} call errorFn(); {18118#false} is VALID [2022-04-15 17:41:52,532 INFO L290 TraceCheckUtils]: 50: Hoare triple {18118#false} assume !false; {18118#false} is VALID [2022-04-15 17:41:52,532 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:41:52,532 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:41:52,532 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [964992396] [2022-04-15 17:41:52,533 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [964992396] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:52,533 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:52,533 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-15 17:41:52,533 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:41:52,533 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [710248243] [2022-04-15 17:41:52,533 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [710248243] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:52,533 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:52,533 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-15 17:41:52,533 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1010116119] [2022-04-15 17:41:52,533 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:41:52,533 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 51 [2022-04-15 17:41:52,534 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:41:52,534 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-15 17:41:52,561 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:52,561 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-15 17:41:52,561 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:52,562 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-15 17:41:52,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-15 17:41:52,562 INFO L87 Difference]: Start difference. First operand 240 states and 317 transitions. Second operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-15 17:41:54,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:54,831 INFO L93 Difference]: Finished difference Result 284 states and 365 transitions. [2022-04-15 17:41:54,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-15 17:41:54,831 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 51 [2022-04-15 17:41:54,831 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:41:54,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-15 17:41:54,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 365 transitions. [2022-04-15 17:41:54,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-15 17:41:54,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 365 transitions. [2022-04-15 17:41:54,842 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 365 transitions. [2022-04-15 17:41:55,162 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:55,165 INFO L225 Difference]: With dead ends: 284 [2022-04-15 17:41:55,165 INFO L226 Difference]: Without dead ends: 243 [2022-04-15 17:41:55,166 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=109, Invalid=311, Unknown=0, NotChecked=0, Total=420 [2022-04-15 17:41:55,166 INFO L913 BasicCegarLoop]: 252 mSDtfsCounter, 655 mSDsluCounter, 341 mSDsCounter, 0 mSdLazyCounter, 741 mSolverCounterSat, 143 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 660 SdHoareTripleChecker+Valid, 593 SdHoareTripleChecker+Invalid, 884 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 143 IncrementalHoareTripleChecker+Valid, 741 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-15 17:41:55,166 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [660 Valid, 593 Invalid, 884 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [143 Valid, 741 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-15 17:41:55,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2022-04-15 17:41:55,498 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 240. [2022-04-15 17:41:55,499 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:41:55,499 INFO L82 GeneralOperation]: Start isEquivalent. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:55,500 INFO L74 IsIncluded]: Start isIncluded. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:55,501 INFO L87 Difference]: Start difference. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:55,504 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:55,504 INFO L93 Difference]: Finished difference Result 243 states and 317 transitions. [2022-04-15 17:41:55,504 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 317 transitions. [2022-04-15 17:41:55,507 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:55,507 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:55,507 INFO L74 IsIncluded]: Start isIncluded. First operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 243 states. [2022-04-15 17:41:55,508 INFO L87 Difference]: Start difference. First operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 243 states. [2022-04-15 17:41:55,511 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:55,511 INFO L93 Difference]: Finished difference Result 243 states and 317 transitions. [2022-04-15 17:41:55,511 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 317 transitions. [2022-04-15 17:41:55,513 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:55,513 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:55,513 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:41:55,513 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:41:55,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:55,517 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 315 transitions. [2022-04-15 17:41:55,517 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 315 transitions. Word has length 51 [2022-04-15 17:41:55,517 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:41:55,518 INFO L478 AbstractCegarLoop]: Abstraction has 240 states and 315 transitions. [2022-04-15 17:41:55,518 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-15 17:41:55,518 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 240 states and 315 transitions. [2022-04-15 17:41:55,870 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 315 edges. 315 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:55,870 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 315 transitions. [2022-04-15 17:41:55,871 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-15 17:41:55,871 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:41:55,871 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:41:55,871 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-04-15 17:41:55,871 INFO L403 AbstractCegarLoop]: === Iteration 11 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:41:55,871 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:41:55,871 INFO L85 PathProgramCache]: Analyzing trace with hash 460482069, now seen corresponding path program 1 times [2022-04-15 17:41:55,872 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:55,872 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [95914847] [2022-04-15 17:41:55,872 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:41:55,872 INFO L85 PathProgramCache]: Analyzing trace with hash 460482069, now seen corresponding path program 2 times [2022-04-15 17:41:55,872 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:41:55,872 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1371757829] [2022-04-15 17:41:55,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:41:55,872 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:41:55,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:55,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:41:55,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:55,948 INFO L290 TraceCheckUtils]: 0: Hoare triple {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {19722#true} is VALID [2022-04-15 17:41:55,948 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-15 17:41:55,948 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19722#true} {19722#true} #783#return; {19722#true} is VALID [2022-04-15 17:41:55,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:41:55,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:55,977 INFO L290 TraceCheckUtils]: 0: Hoare triple {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-15 17:41:55,978 INFO L290 TraceCheckUtils]: 1: Hoare triple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-15 17:41:55,978 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {19722#true} #715#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:55,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:41:55,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:55,992 INFO L290 TraceCheckUtils]: 0: Hoare triple {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19722#true} is VALID [2022-04-15 17:41:55,992 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-15 17:41:55,992 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19722#true} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:55,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-15 17:41:56,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:56,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-15 17:41:56,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:56,040 INFO L290 TraceCheckUtils]: 0: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-15 17:41:56,041 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-15 17:41:56,041 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-15 17:41:56,041 INFO L290 TraceCheckUtils]: 3: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-15 17:41:56,041 INFO L290 TraceCheckUtils]: 4: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-15 17:41:56,041 INFO L290 TraceCheckUtils]: 5: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-15 17:41:56,042 INFO L290 TraceCheckUtils]: 6: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-15 17:41:56,042 INFO L290 TraceCheckUtils]: 7: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-15 17:41:56,042 INFO L290 TraceCheckUtils]: 8: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-15 17:41:56,042 INFO L290 TraceCheckUtils]: 9: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-15 17:41:56,042 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-15 17:41:56,042 INFO L290 TraceCheckUtils]: 0: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {19722#true} is VALID [2022-04-15 17:41:56,042 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume 2 == ~irpStack__MinorFunction~1; {19722#true} is VALID [2022-04-15 17:41:56,042 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {19722#true} is VALID [2022-04-15 17:41:56,043 INFO L290 TraceCheckUtils]: 3: Hoare triple {19722#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {19722#true} is VALID [2022-04-15 17:41:56,043 INFO L290 TraceCheckUtils]: 4: Hoare triple {19722#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {19722#true} is VALID [2022-04-15 17:41:56,043 INFO L272 TraceCheckUtils]: 5: Hoare triple {19722#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:56,043 INFO L290 TraceCheckUtils]: 6: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-15 17:41:56,043 INFO L290 TraceCheckUtils]: 7: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-15 17:41:56,043 INFO L290 TraceCheckUtils]: 8: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-15 17:41:56,044 INFO L290 TraceCheckUtils]: 9: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-15 17:41:56,044 INFO L290 TraceCheckUtils]: 10: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-15 17:41:56,044 INFO L290 TraceCheckUtils]: 11: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-15 17:41:56,044 INFO L290 TraceCheckUtils]: 12: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-15 17:41:56,045 INFO L290 TraceCheckUtils]: 13: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-15 17:41:56,045 INFO L290 TraceCheckUtils]: 14: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-15 17:41:56,045 INFO L290 TraceCheckUtils]: 15: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-15 17:41:56,045 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-15 17:41:56,045 INFO L290 TraceCheckUtils]: 17: Hoare triple {19723#false} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {19723#false} is VALID [2022-04-15 17:41:56,045 INFO L290 TraceCheckUtils]: 18: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-15 17:41:56,045 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {19723#false} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {19723#false} is VALID [2022-04-15 17:41:56,046 INFO L272 TraceCheckUtils]: 0: Hoare triple {19722#true} call ULTIMATE.init(); {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:41:56,046 INFO L290 TraceCheckUtils]: 1: Hoare triple {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {19722#true} is VALID [2022-04-15 17:41:56,046 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-15 17:41:56,046 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {19722#true} {19722#true} #783#return; {19722#true} is VALID [2022-04-15 17:41:56,046 INFO L272 TraceCheckUtils]: 4: Hoare triple {19722#true} call #t~ret81 := main(); {19722#true} is VALID [2022-04-15 17:41:56,047 INFO L290 TraceCheckUtils]: 5: Hoare triple {19722#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {19722#true} is VALID [2022-04-15 17:41:56,047 INFO L272 TraceCheckUtils]: 6: Hoare triple {19722#true} call _BLAST_init(); {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:56,048 INFO L290 TraceCheckUtils]: 7: Hoare triple {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-15 17:41:56,048 INFO L290 TraceCheckUtils]: 8: Hoare triple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-15 17:41:56,049 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {19722#true} #715#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:56,049 INFO L290 TraceCheckUtils]: 10: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:56,049 INFO L290 TraceCheckUtils]: 11: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~irp_choice~0); {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:56,050 INFO L272 TraceCheckUtils]: 12: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call stub_driver_init(); {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:56,050 INFO L290 TraceCheckUtils]: 13: Hoare triple {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19722#true} is VALID [2022-04-15 17:41:56,050 INFO L290 TraceCheckUtils]: 14: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-15 17:41:56,050 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {19722#true} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:56,051 INFO L290 TraceCheckUtils]: 16: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:56,051 INFO L290 TraceCheckUtils]: 17: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:56,051 INFO L290 TraceCheckUtils]: 18: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:56,052 INFO L290 TraceCheckUtils]: 19: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:56,052 INFO L290 TraceCheckUtils]: 20: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 4 == ~tmp_ndt_4~0; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:56,053 INFO L272 TraceCheckUtils]: 21: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:56,053 INFO L290 TraceCheckUtils]: 22: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {19722#true} is VALID [2022-04-15 17:41:56,053 INFO L290 TraceCheckUtils]: 23: Hoare triple {19722#true} assume 2 == ~irpStack__MinorFunction~1; {19722#true} is VALID [2022-04-15 17:41:56,053 INFO L290 TraceCheckUtils]: 24: Hoare triple {19722#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {19722#true} is VALID [2022-04-15 17:41:56,053 INFO L290 TraceCheckUtils]: 25: Hoare triple {19722#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {19722#true} is VALID [2022-04-15 17:41:56,053 INFO L290 TraceCheckUtils]: 26: Hoare triple {19722#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {19722#true} is VALID [2022-04-15 17:41:56,054 INFO L272 TraceCheckUtils]: 27: Hoare triple {19722#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:56,054 INFO L290 TraceCheckUtils]: 28: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-15 17:41:56,054 INFO L290 TraceCheckUtils]: 29: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-15 17:41:56,054 INFO L290 TraceCheckUtils]: 30: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-15 17:41:56,054 INFO L290 TraceCheckUtils]: 31: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-15 17:41:56,054 INFO L290 TraceCheckUtils]: 32: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-15 17:41:56,055 INFO L290 TraceCheckUtils]: 33: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-15 17:41:56,056 INFO L290 TraceCheckUtils]: 34: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-15 17:41:56,056 INFO L290 TraceCheckUtils]: 35: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-15 17:41:56,056 INFO L290 TraceCheckUtils]: 36: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-15 17:41:56,056 INFO L290 TraceCheckUtils]: 37: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-15 17:41:56,056 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-15 17:41:56,056 INFO L290 TraceCheckUtils]: 39: Hoare triple {19723#false} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {19723#false} is VALID [2022-04-15 17:41:56,056 INFO L290 TraceCheckUtils]: 40: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-15 17:41:56,057 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {19723#false} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {19723#false} is VALID [2022-04-15 17:41:56,057 INFO L290 TraceCheckUtils]: 42: Hoare triple {19723#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {19723#false} is VALID [2022-04-15 17:41:56,057 INFO L290 TraceCheckUtils]: 43: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-15 17:41:56,057 INFO L290 TraceCheckUtils]: 44: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-15 17:41:56,057 INFO L290 TraceCheckUtils]: 45: Hoare triple {19723#false} assume ~s~0 != ~UNLOADED~0; {19723#false} is VALID [2022-04-15 17:41:56,057 INFO L290 TraceCheckUtils]: 46: Hoare triple {19723#false} assume -1 != ~status~1; {19723#false} is VALID [2022-04-15 17:41:56,057 INFO L290 TraceCheckUtils]: 47: Hoare triple {19723#false} assume !(~s~0 != ~SKIP2~0); {19723#false} is VALID [2022-04-15 17:41:56,057 INFO L290 TraceCheckUtils]: 48: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-15 17:41:56,057 INFO L290 TraceCheckUtils]: 49: Hoare triple {19723#false} assume !(~s~0 == ~DC~0); {19723#false} is VALID [2022-04-15 17:41:56,057 INFO L290 TraceCheckUtils]: 50: Hoare triple {19723#false} assume ~status~1 != ~lowerDriverReturn~0; {19723#false} is VALID [2022-04-15 17:41:56,057 INFO L272 TraceCheckUtils]: 51: Hoare triple {19723#false} call errorFn(); {19723#false} is VALID [2022-04-15 17:41:56,057 INFO L290 TraceCheckUtils]: 52: Hoare triple {19723#false} assume !false; {19723#false} is VALID [2022-04-15 17:41:56,057 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:41:56,058 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:41:56,058 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1371757829] [2022-04-15 17:41:56,058 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1371757829] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:56,058 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:56,058 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-15 17:41:56,058 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:41:56,058 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [95914847] [2022-04-15 17:41:56,058 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [95914847] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:56,058 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:56,058 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-15 17:41:56,058 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1836258731] [2022-04-15 17:41:56,058 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:41:56,059 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 53 [2022-04-15 17:41:56,060 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:41:56,060 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:56,091 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:56,092 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-15 17:41:56,092 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:56,092 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-15 17:41:56,092 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2022-04-15 17:41:56,092 INFO L87 Difference]: Start difference. First operand 240 states and 315 transitions. Second operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:58,135 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:58,135 INFO L93 Difference]: Finished difference Result 272 states and 349 transitions. [2022-04-15 17:41:58,135 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-15 17:41:58,136 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 53 [2022-04-15 17:41:58,136 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:41:58,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:58,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 325 transitions. [2022-04-15 17:41:58,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:58,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 325 transitions. [2022-04-15 17:41:58,143 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 325 transitions. [2022-04-15 17:41:58,445 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 325 edges. 325 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:58,450 INFO L225 Difference]: With dead ends: 272 [2022-04-15 17:41:58,450 INFO L226 Difference]: Without dead ends: 253 [2022-04-15 17:41:58,450 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 37 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=95, Invalid=211, Unknown=0, NotChecked=0, Total=306 [2022-04-15 17:41:58,451 INFO L913 BasicCegarLoop]: 238 mSDtfsCounter, 723 mSDsluCounter, 298 mSDsCounter, 0 mSdLazyCounter, 434 mSolverCounterSat, 102 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 726 SdHoareTripleChecker+Valid, 536 SdHoareTripleChecker+Invalid, 536 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 102 IncrementalHoareTripleChecker+Valid, 434 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-15 17:41:58,451 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [726 Valid, 536 Invalid, 536 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [102 Valid, 434 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-15 17:41:58,451 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 253 states. [2022-04-15 17:41:58,860 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 253 to 243. [2022-04-15 17:41:58,860 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:41:58,861 INFO L82 GeneralOperation]: Start isEquivalent. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:58,861 INFO L74 IsIncluded]: Start isIncluded. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:58,861 INFO L87 Difference]: Start difference. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:58,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:58,867 INFO L93 Difference]: Finished difference Result 253 states and 329 transitions. [2022-04-15 17:41:58,867 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 329 transitions. [2022-04-15 17:41:58,867 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:58,867 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:58,868 INFO L74 IsIncluded]: Start isIncluded. First operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 253 states. [2022-04-15 17:41:58,868 INFO L87 Difference]: Start difference. First operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 253 states. [2022-04-15 17:41:58,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:41:58,873 INFO L93 Difference]: Finished difference Result 253 states and 329 transitions. [2022-04-15 17:41:58,873 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 329 transitions. [2022-04-15 17:41:58,874 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:41:58,874 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:41:58,874 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:41:58,874 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:41:58,874 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:41:58,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 319 transitions. [2022-04-15 17:41:58,880 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 319 transitions. Word has length 53 [2022-04-15 17:41:58,880 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:41:58,880 INFO L478 AbstractCegarLoop]: Abstraction has 243 states and 319 transitions. [2022-04-15 17:41:58,880 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-15 17:41:58,880 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 243 states and 319 transitions. [2022-04-15 17:41:59,237 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 319 edges. 319 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:59,237 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 319 transitions. [2022-04-15 17:41:59,239 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-15 17:41:59,239 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:41:59,239 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:41:59,240 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-04-15 17:41:59,240 INFO L403 AbstractCegarLoop]: === Iteration 12 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:41:59,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:41:59,240 INFO L85 PathProgramCache]: Analyzing trace with hash -1533662637, now seen corresponding path program 1 times [2022-04-15 17:41:59,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:59,240 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [712759593] [2022-04-15 17:41:59,240 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:41:59,240 INFO L85 PathProgramCache]: Analyzing trace with hash -1533662637, now seen corresponding path program 2 times [2022-04-15 17:41:59,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:41:59,241 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1407047931] [2022-04-15 17:41:59,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:41:59,241 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:41:59,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:59,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:41:59,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:59,315 INFO L290 TraceCheckUtils]: 0: Hoare triple {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {21327#true} is VALID [2022-04-15 17:41:59,315 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-15 17:41:59,315 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21327#true} {21327#true} #783#return; {21327#true} is VALID [2022-04-15 17:41:59,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:41:59,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:59,346 INFO L290 TraceCheckUtils]: 0: Hoare triple {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-15 17:41:59,346 INFO L290 TraceCheckUtils]: 1: Hoare triple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-15 17:41:59,347 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {21327#true} #715#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:59,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:41:59,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:59,359 INFO L290 TraceCheckUtils]: 0: Hoare triple {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21327#true} is VALID [2022-04-15 17:41:59,359 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-15 17:41:59,359 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21327#true} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:59,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-15 17:41:59,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:59,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-15 17:41:59,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:41:59,410 INFO L290 TraceCheckUtils]: 0: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,411 INFO L290 TraceCheckUtils]: 1: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,411 INFO L290 TraceCheckUtils]: 2: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,411 INFO L290 TraceCheckUtils]: 3: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,412 INFO L290 TraceCheckUtils]: 4: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,412 INFO L290 TraceCheckUtils]: 5: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,412 INFO L290 TraceCheckUtils]: 6: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,412 INFO L290 TraceCheckUtils]: 7: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,413 INFO L290 TraceCheckUtils]: 8: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,413 INFO L290 TraceCheckUtils]: 9: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,413 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-15 17:41:59,414 INFO L290 TraceCheckUtils]: 0: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {21327#true} is VALID [2022-04-15 17:41:59,414 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume 2 == ~irpStack__MinorFunction~1; {21327#true} is VALID [2022-04-15 17:41:59,414 INFO L290 TraceCheckUtils]: 2: Hoare triple {21327#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {21327#true} is VALID [2022-04-15 17:41:59,414 INFO L290 TraceCheckUtils]: 3: Hoare triple {21327#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:59,414 INFO L290 TraceCheckUtils]: 4: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:59,415 INFO L272 TraceCheckUtils]: 5: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:59,415 INFO L290 TraceCheckUtils]: 6: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,415 INFO L290 TraceCheckUtils]: 7: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,415 INFO L290 TraceCheckUtils]: 8: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,416 INFO L290 TraceCheckUtils]: 9: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,416 INFO L290 TraceCheckUtils]: 10: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,416 INFO L290 TraceCheckUtils]: 11: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,416 INFO L290 TraceCheckUtils]: 12: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,417 INFO L290 TraceCheckUtils]: 13: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,417 INFO L290 TraceCheckUtils]: 14: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,417 INFO L290 TraceCheckUtils]: 15: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,418 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-15 17:41:59,418 INFO L290 TraceCheckUtils]: 17: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-15 17:41:59,418 INFO L290 TraceCheckUtils]: 18: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume true; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-15 17:41:59,419 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {21376#(= ~MPR1~0 ~SKIP1~0)} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {21328#false} is VALID [2022-04-15 17:41:59,420 INFO L272 TraceCheckUtils]: 0: Hoare triple {21327#true} call ULTIMATE.init(); {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:41:59,420 INFO L290 TraceCheckUtils]: 1: Hoare triple {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {21327#true} is VALID [2022-04-15 17:41:59,420 INFO L290 TraceCheckUtils]: 2: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-15 17:41:59,420 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {21327#true} {21327#true} #783#return; {21327#true} is VALID [2022-04-15 17:41:59,420 INFO L272 TraceCheckUtils]: 4: Hoare triple {21327#true} call #t~ret81 := main(); {21327#true} is VALID [2022-04-15 17:41:59,420 INFO L290 TraceCheckUtils]: 5: Hoare triple {21327#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {21327#true} is VALID [2022-04-15 17:41:59,421 INFO L272 TraceCheckUtils]: 6: Hoare triple {21327#true} call _BLAST_init(); {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:59,421 INFO L290 TraceCheckUtils]: 7: Hoare triple {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-15 17:41:59,422 INFO L290 TraceCheckUtils]: 8: Hoare triple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-15 17:41:59,422 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {21327#true} #715#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:59,422 INFO L290 TraceCheckUtils]: 10: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:59,423 INFO L290 TraceCheckUtils]: 11: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~irp_choice~0); {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:59,423 INFO L272 TraceCheckUtils]: 12: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call stub_driver_init(); {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:59,423 INFO L290 TraceCheckUtils]: 13: Hoare triple {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21327#true} is VALID [2022-04-15 17:41:59,423 INFO L290 TraceCheckUtils]: 14: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-15 17:41:59,424 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {21327#true} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:59,424 INFO L290 TraceCheckUtils]: 16: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:59,424 INFO L290 TraceCheckUtils]: 17: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:59,425 INFO L290 TraceCheckUtils]: 18: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:59,425 INFO L290 TraceCheckUtils]: 19: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:59,425 INFO L290 TraceCheckUtils]: 20: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 4 == ~tmp_ndt_4~0; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-15 17:41:59,426 INFO L272 TraceCheckUtils]: 21: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:59,426 INFO L290 TraceCheckUtils]: 22: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {21327#true} is VALID [2022-04-15 17:41:59,426 INFO L290 TraceCheckUtils]: 23: Hoare triple {21327#true} assume 2 == ~irpStack__MinorFunction~1; {21327#true} is VALID [2022-04-15 17:41:59,426 INFO L290 TraceCheckUtils]: 24: Hoare triple {21327#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {21327#true} is VALID [2022-04-15 17:41:59,426 INFO L290 TraceCheckUtils]: 25: Hoare triple {21327#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:59,427 INFO L290 TraceCheckUtils]: 26: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-15 17:41:59,427 INFO L272 TraceCheckUtils]: 27: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:41:59,427 INFO L290 TraceCheckUtils]: 28: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,428 INFO L290 TraceCheckUtils]: 29: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,428 INFO L290 TraceCheckUtils]: 30: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,428 INFO L290 TraceCheckUtils]: 31: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,428 INFO L290 TraceCheckUtils]: 32: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,428 INFO L290 TraceCheckUtils]: 33: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,429 INFO L290 TraceCheckUtils]: 34: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,429 INFO L290 TraceCheckUtils]: 35: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,429 INFO L290 TraceCheckUtils]: 36: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,429 INFO L290 TraceCheckUtils]: 37: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-15 17:41:59,430 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-15 17:41:59,430 INFO L290 TraceCheckUtils]: 39: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-15 17:41:59,430 INFO L290 TraceCheckUtils]: 40: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume true; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-15 17:41:59,431 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {21376#(= ~MPR1~0 ~SKIP1~0)} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {21328#false} is VALID [2022-04-15 17:41:59,431 INFO L290 TraceCheckUtils]: 42: Hoare triple {21328#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {21328#false} is VALID [2022-04-15 17:41:59,431 INFO L290 TraceCheckUtils]: 43: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-15 17:41:59,431 INFO L290 TraceCheckUtils]: 44: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-15 17:41:59,431 INFO L290 TraceCheckUtils]: 45: Hoare triple {21328#false} assume ~s~0 != ~UNLOADED~0; {21328#false} is VALID [2022-04-15 17:41:59,431 INFO L290 TraceCheckUtils]: 46: Hoare triple {21328#false} assume -1 != ~status~1; {21328#false} is VALID [2022-04-15 17:41:59,431 INFO L290 TraceCheckUtils]: 47: Hoare triple {21328#false} assume !(~s~0 != ~SKIP2~0); {21328#false} is VALID [2022-04-15 17:41:59,431 INFO L290 TraceCheckUtils]: 48: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-15 17:41:59,431 INFO L290 TraceCheckUtils]: 49: Hoare triple {21328#false} assume !(~s~0 == ~DC~0); {21328#false} is VALID [2022-04-15 17:41:59,432 INFO L290 TraceCheckUtils]: 50: Hoare triple {21328#false} assume ~status~1 != ~lowerDriverReturn~0; {21328#false} is VALID [2022-04-15 17:41:59,432 INFO L272 TraceCheckUtils]: 51: Hoare triple {21328#false} call errorFn(); {21328#false} is VALID [2022-04-15 17:41:59,432 INFO L290 TraceCheckUtils]: 52: Hoare triple {21328#false} assume !false; {21328#false} is VALID [2022-04-15 17:41:59,432 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:41:59,432 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:41:59,432 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1407047931] [2022-04-15 17:41:59,432 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1407047931] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:59,432 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:59,432 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-15 17:41:59,432 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:41:59,432 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [712759593] [2022-04-15 17:41:59,433 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [712759593] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:41:59,433 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:41:59,433 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-15 17:41:59,433 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2033052694] [2022-04-15 17:41:59,433 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:41:59,433 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 53 [2022-04-15 17:41:59,433 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:41:59,433 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-15 17:41:59,462 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:41:59,462 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-15 17:41:59,462 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:41:59,462 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-15 17:41:59,462 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-15 17:41:59,463 INFO L87 Difference]: Start difference. First operand 243 states and 319 transitions. Second operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-15 17:42:02,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:02,096 INFO L93 Difference]: Finished difference Result 284 states and 365 transitions. [2022-04-15 17:42:02,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-15 17:42:02,096 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 53 [2022-04-15 17:42:02,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:42:02,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-15 17:42:02,098 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 347 transitions. [2022-04-15 17:42:02,098 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-15 17:42:02,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 347 transitions. [2022-04-15 17:42:02,101 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 347 transitions. [2022-04-15 17:42:02,414 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 347 edges. 347 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:02,418 INFO L225 Difference]: With dead ends: 284 [2022-04-15 17:42:02,418 INFO L226 Difference]: Without dead ends: 240 [2022-04-15 17:42:02,419 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=101, Invalid=279, Unknown=0, NotChecked=0, Total=380 [2022-04-15 17:42:02,419 INFO L913 BasicCegarLoop]: 234 mSDtfsCounter, 964 mSDsluCounter, 349 mSDsCounter, 0 mSdLazyCounter, 711 mSolverCounterSat, 177 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 965 SdHoareTripleChecker+Valid, 583 SdHoareTripleChecker+Invalid, 888 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 177 IncrementalHoareTripleChecker+Valid, 711 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-15 17:42:02,419 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [965 Valid, 583 Invalid, 888 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [177 Valid, 711 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-15 17:42:02,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-04-15 17:42:02,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 238. [2022-04-15 17:42:02,790 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:42:02,792 INFO L82 GeneralOperation]: Start isEquivalent. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:42:02,792 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:42:02,793 INFO L87 Difference]: Start difference. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:42:02,796 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:02,797 INFO L93 Difference]: Finished difference Result 240 states and 311 transitions. [2022-04-15 17:42:02,797 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 311 transitions. [2022-04-15 17:42:02,797 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:02,797 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:02,797 INFO L74 IsIncluded]: Start isIncluded. First operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-15 17:42:02,798 INFO L87 Difference]: Start difference. First operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-15 17:42:02,801 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:02,801 INFO L93 Difference]: Finished difference Result 240 states and 311 transitions. [2022-04-15 17:42:02,801 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 311 transitions. [2022-04-15 17:42:02,802 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:02,802 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:02,802 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:42:02,802 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:42:02,802 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-15 17:42:02,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 238 states to 238 states and 309 transitions. [2022-04-15 17:42:02,806 INFO L78 Accepts]: Start accepts. Automaton has 238 states and 309 transitions. Word has length 53 [2022-04-15 17:42:02,806 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:42:02,806 INFO L478 AbstractCegarLoop]: Abstraction has 238 states and 309 transitions. [2022-04-15 17:42:02,807 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-15 17:42:02,807 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 238 states and 309 transitions. [2022-04-15 17:42:03,173 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 309 edges. 309 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:03,173 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 309 transitions. [2022-04-15 17:42:03,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-15 17:42:03,174 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:42:03,174 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:42:03,175 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-04-15 17:42:03,175 INFO L403 AbstractCegarLoop]: === Iteration 13 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:42:03,175 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:42:03,175 INFO L85 PathProgramCache]: Analyzing trace with hash -1386969835, now seen corresponding path program 1 times [2022-04-15 17:42:03,175 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:03,175 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1051456830] [2022-04-15 17:42:03,175 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:42:03,175 INFO L85 PathProgramCache]: Analyzing trace with hash -1386969835, now seen corresponding path program 2 times [2022-04-15 17:42:03,175 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:42:03,175 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1058950875] [2022-04-15 17:42:03,176 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:42:03,176 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:42:03,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:03,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:42:03,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:03,242 INFO L290 TraceCheckUtils]: 0: Hoare triple {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-15 17:42:03,242 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-15 17:42:03,242 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #783#return; {22923#true} is VALID [2022-04-15 17:42:03,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:42:03,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:03,262 INFO L290 TraceCheckUtils]: 0: Hoare triple {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-15 17:42:03,262 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-15 17:42:03,262 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #715#return; {22923#true} is VALID [2022-04-15 17:42:03,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:42:03,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:03,274 INFO L290 TraceCheckUtils]: 0: Hoare triple {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-15 17:42:03,274 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-15 17:42:03,274 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #717#return; {22923#true} is VALID [2022-04-15 17:42:03,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-15 17:42:03,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:03,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-15 17:42:03,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:03,321 INFO L290 TraceCheckUtils]: 0: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-15 17:42:03,321 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-15 17:42:03,321 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-15 17:42:03,321 INFO L290 TraceCheckUtils]: 3: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-15 17:42:03,321 INFO L290 TraceCheckUtils]: 4: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-15 17:42:03,321 INFO L290 TraceCheckUtils]: 5: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-15 17:42:03,321 INFO L290 TraceCheckUtils]: 6: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-15 17:42:03,322 INFO L290 TraceCheckUtils]: 7: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-15 17:42:03,322 INFO L290 TraceCheckUtils]: 8: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,322 INFO L290 TraceCheckUtils]: 9: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,323 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-15 17:42:03,323 INFO L290 TraceCheckUtils]: 0: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {22923#true} is VALID [2022-04-15 17:42:03,323 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume 2 == ~irpStack__MinorFunction~1; {22923#true} is VALID [2022-04-15 17:42:03,323 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {22923#true} is VALID [2022-04-15 17:42:03,323 INFO L290 TraceCheckUtils]: 3: Hoare triple {22923#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {22923#true} is VALID [2022-04-15 17:42:03,323 INFO L290 TraceCheckUtils]: 4: Hoare triple {22923#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {22923#true} is VALID [2022-04-15 17:42:03,324 INFO L272 TraceCheckUtils]: 5: Hoare triple {22923#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:03,324 INFO L290 TraceCheckUtils]: 6: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-15 17:42:03,329 INFO L290 TraceCheckUtils]: 7: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-15 17:42:03,329 INFO L290 TraceCheckUtils]: 8: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-15 17:42:03,329 INFO L290 TraceCheckUtils]: 9: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-15 17:42:03,330 INFO L290 TraceCheckUtils]: 10: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-15 17:42:03,330 INFO L290 TraceCheckUtils]: 11: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-15 17:42:03,330 INFO L290 TraceCheckUtils]: 12: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-15 17:42:03,330 INFO L290 TraceCheckUtils]: 13: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-15 17:42:03,330 INFO L290 TraceCheckUtils]: 14: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,330 INFO L290 TraceCheckUtils]: 15: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,331 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-15 17:42:03,331 INFO L290 TraceCheckUtils]: 17: Hoare triple {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,332 INFO L290 TraceCheckUtils]: 18: Hoare triple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} assume true; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,332 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} {22923#true} #725#return; {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,334 INFO L272 TraceCheckUtils]: 0: Hoare triple {22923#true} call ULTIMATE.init(); {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:42:03,334 INFO L290 TraceCheckUtils]: 1: Hoare triple {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-15 17:42:03,334 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-15 17:42:03,334 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {22923#true} {22923#true} #783#return; {22923#true} is VALID [2022-04-15 17:42:03,334 INFO L272 TraceCheckUtils]: 4: Hoare triple {22923#true} call #t~ret81 := main(); {22923#true} is VALID [2022-04-15 17:42:03,334 INFO L290 TraceCheckUtils]: 5: Hoare triple {22923#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {22923#true} is VALID [2022-04-15 17:42:03,335 INFO L272 TraceCheckUtils]: 6: Hoare triple {22923#true} call _BLAST_init(); {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:03,335 INFO L290 TraceCheckUtils]: 7: Hoare triple {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-15 17:42:03,335 INFO L290 TraceCheckUtils]: 8: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-15 17:42:03,335 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {22923#true} {22923#true} #715#return; {22923#true} is VALID [2022-04-15 17:42:03,335 INFO L290 TraceCheckUtils]: 10: Hoare triple {22923#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-15 17:42:03,335 INFO L290 TraceCheckUtils]: 11: Hoare triple {22923#true} assume !(0 == ~irp_choice~0); {22923#true} is VALID [2022-04-15 17:42:03,336 INFO L272 TraceCheckUtils]: 12: Hoare triple {22923#true} call stub_driver_init(); {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:03,336 INFO L290 TraceCheckUtils]: 13: Hoare triple {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-15 17:42:03,336 INFO L290 TraceCheckUtils]: 14: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-15 17:42:03,336 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {22923#true} {22923#true} #717#return; {22923#true} is VALID [2022-04-15 17:42:03,336 INFO L290 TraceCheckUtils]: 16: Hoare triple {22923#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {22923#true} is VALID [2022-04-15 17:42:03,336 INFO L290 TraceCheckUtils]: 17: Hoare triple {22923#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {22923#true} is VALID [2022-04-15 17:42:03,336 INFO L290 TraceCheckUtils]: 18: Hoare triple {22923#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {22923#true} is VALID [2022-04-15 17:42:03,336 INFO L290 TraceCheckUtils]: 19: Hoare triple {22923#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {22923#true} is VALID [2022-04-15 17:42:03,336 INFO L290 TraceCheckUtils]: 20: Hoare triple {22923#true} assume 4 == ~tmp_ndt_4~0; {22923#true} is VALID [2022-04-15 17:42:03,337 INFO L272 TraceCheckUtils]: 21: Hoare triple {22923#true} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:03,337 INFO L290 TraceCheckUtils]: 22: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {22923#true} is VALID [2022-04-15 17:42:03,337 INFO L290 TraceCheckUtils]: 23: Hoare triple {22923#true} assume 2 == ~irpStack__MinorFunction~1; {22923#true} is VALID [2022-04-15 17:42:03,337 INFO L290 TraceCheckUtils]: 24: Hoare triple {22923#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {22923#true} is VALID [2022-04-15 17:42:03,337 INFO L290 TraceCheckUtils]: 25: Hoare triple {22923#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {22923#true} is VALID [2022-04-15 17:42:03,337 INFO L290 TraceCheckUtils]: 26: Hoare triple {22923#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {22923#true} is VALID [2022-04-15 17:42:03,338 INFO L272 TraceCheckUtils]: 27: Hoare triple {22923#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:03,338 INFO L290 TraceCheckUtils]: 28: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-15 17:42:03,338 INFO L290 TraceCheckUtils]: 29: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-15 17:42:03,338 INFO L290 TraceCheckUtils]: 30: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-15 17:42:03,338 INFO L290 TraceCheckUtils]: 31: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-15 17:42:03,338 INFO L290 TraceCheckUtils]: 32: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-15 17:42:03,338 INFO L290 TraceCheckUtils]: 33: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-15 17:42:03,338 INFO L290 TraceCheckUtils]: 34: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-15 17:42:03,338 INFO L290 TraceCheckUtils]: 35: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-15 17:42:03,339 INFO L290 TraceCheckUtils]: 36: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,339 INFO L290 TraceCheckUtils]: 37: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,340 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-15 17:42:03,340 INFO L290 TraceCheckUtils]: 39: Hoare triple {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,341 INFO L290 TraceCheckUtils]: 40: Hoare triple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} assume true; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,342 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} {22923#true} #725#return; {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,342 INFO L290 TraceCheckUtils]: 42: Hoare triple {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,343 INFO L290 TraceCheckUtils]: 43: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,344 INFO L290 TraceCheckUtils]: 44: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,345 INFO L290 TraceCheckUtils]: 45: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,346 INFO L290 TraceCheckUtils]: 46: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,346 INFO L290 TraceCheckUtils]: 47: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,346 INFO L290 TraceCheckUtils]: 48: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,346 INFO L290 TraceCheckUtils]: 49: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:03,347 INFO L290 TraceCheckUtils]: 50: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {22924#false} is VALID [2022-04-15 17:42:03,347 INFO L272 TraceCheckUtils]: 51: Hoare triple {22924#false} call errorFn(); {22924#false} is VALID [2022-04-15 17:42:03,347 INFO L290 TraceCheckUtils]: 52: Hoare triple {22924#false} assume !false; {22924#false} is VALID [2022-04-15 17:42:03,347 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:42:03,348 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:42:03,348 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1058950875] [2022-04-15 17:42:03,348 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1058950875] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:03,348 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:03,348 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-15 17:42:03,348 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:42:03,348 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1051456830] [2022-04-15 17:42:03,348 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1051456830] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:03,348 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:03,348 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-15 17:42:03,348 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [683199207] [2022-04-15 17:42:03,348 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:42:03,349 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 53 [2022-04-15 17:42:03,349 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:42:03,349 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:03,379 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:03,379 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-15 17:42:03,379 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:03,380 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-15 17:42:03,380 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=105, Unknown=0, NotChecked=0, Total=132 [2022-04-15 17:42:03,380 INFO L87 Difference]: Start difference. First operand 238 states and 309 transitions. Second operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:06,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:06,295 INFO L93 Difference]: Finished difference Result 250 states and 321 transitions. [2022-04-15 17:42:06,295 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-04-15 17:42:06,295 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 53 [2022-04-15 17:42:06,295 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:42:06,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:06,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 297 transitions. [2022-04-15 17:42:06,300 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:06,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 297 transitions. [2022-04-15 17:42:06,302 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 11 states and 297 transitions. [2022-04-15 17:42:06,549 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 297 edges. 297 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:06,552 INFO L225 Difference]: With dead ends: 250 [2022-04-15 17:42:06,552 INFO L226 Difference]: Without dead ends: 210 [2022-04-15 17:42:06,552 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2022-04-15 17:42:06,553 INFO L913 BasicCegarLoop]: 244 mSDtfsCounter, 433 mSDsluCounter, 661 mSDsCounter, 0 mSdLazyCounter, 1249 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 433 SdHoareTripleChecker+Valid, 905 SdHoareTripleChecker+Invalid, 1323 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 1249 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-15 17:42:06,553 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [433 Valid, 905 Invalid, 1323 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 1249 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-15 17:42:06,553 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-04-15 17:42:06,865 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 210. [2022-04-15 17:42:06,865 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:42:06,866 INFO L82 GeneralOperation]: Start isEquivalent. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-15 17:42:06,866 INFO L74 IsIncluded]: Start isIncluded. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-15 17:42:06,866 INFO L87 Difference]: Start difference. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-15 17:42:06,869 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:06,870 INFO L93 Difference]: Finished difference Result 210 states and 273 transitions. [2022-04-15 17:42:06,870 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-15 17:42:06,870 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:06,870 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:06,870 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) Second operand 210 states. [2022-04-15 17:42:06,871 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) Second operand 210 states. [2022-04-15 17:42:06,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:06,874 INFO L93 Difference]: Finished difference Result 210 states and 273 transitions. [2022-04-15 17:42:06,874 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-15 17:42:06,874 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:06,874 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:06,874 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:42:06,874 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:42:06,874 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-15 17:42:06,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 273 transitions. [2022-04-15 17:42:06,878 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 273 transitions. Word has length 53 [2022-04-15 17:42:06,878 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:42:06,878 INFO L478 AbstractCegarLoop]: Abstraction has 210 states and 273 transitions. [2022-04-15 17:42:06,878 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:06,878 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 273 transitions. [2022-04-15 17:42:07,207 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 273 edges. 273 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:07,207 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-15 17:42:07,208 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-04-15 17:42:07,208 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:42:07,208 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:42:07,208 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-04-15 17:42:07,208 INFO L403 AbstractCegarLoop]: === Iteration 14 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:42:07,209 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:42:07,209 INFO L85 PathProgramCache]: Analyzing trace with hash -438914869, now seen corresponding path program 1 times [2022-04-15 17:42:07,209 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:07,209 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [704943897] [2022-04-15 17:42:07,209 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:42:07,209 INFO L85 PathProgramCache]: Analyzing trace with hash -438914869, now seen corresponding path program 2 times [2022-04-15 17:42:07,209 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:42:07,209 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [351996099] [2022-04-15 17:42:07,209 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:42:07,209 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:42:07,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:07,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:42:07,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:07,273 INFO L290 TraceCheckUtils]: 0: Hoare triple {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-15 17:42:07,273 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-15 17:42:07,273 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #783#return; {24319#true} is VALID [2022-04-15 17:42:07,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:42:07,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:07,297 INFO L290 TraceCheckUtils]: 0: Hoare triple {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-15 17:42:07,297 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-15 17:42:07,297 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #715#return; {24319#true} is VALID [2022-04-15 17:42:07,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:42:07,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:07,310 INFO L290 TraceCheckUtils]: 0: Hoare triple {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-15 17:42:07,310 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-15 17:42:07,311 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #717#return; {24319#true} is VALID [2022-04-15 17:42:07,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-15 17:42:07,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:07,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:42:07,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:07,385 INFO L290 TraceCheckUtils]: 0: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-15 17:42:07,385 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-15 17:42:07,385 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-15 17:42:07,385 INFO L290 TraceCheckUtils]: 3: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-15 17:42:07,385 INFO L290 TraceCheckUtils]: 4: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-15 17:42:07,385 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-15 17:42:07,385 INFO L290 TraceCheckUtils]: 6: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-15 17:42:07,386 INFO L290 TraceCheckUtils]: 7: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-15 17:42:07,386 INFO L290 TraceCheckUtils]: 8: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,386 INFO L290 TraceCheckUtils]: 9: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,387 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,387 INFO L290 TraceCheckUtils]: 0: Hoare triple {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {24319#true} is VALID [2022-04-15 17:42:07,387 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume !(0 == ~irpStack__MinorFunction~0); {24319#true} is VALID [2022-04-15 17:42:07,387 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} assume 23 == ~irpStack__MinorFunction~0; {24319#true} is VALID [2022-04-15 17:42:07,387 INFO L290 TraceCheckUtils]: 3: Hoare triple {24319#true} ~devExt__SurpriseRemoved~0 := 1; {24319#true} is VALID [2022-04-15 17:42:07,387 INFO L290 TraceCheckUtils]: 4: Hoare triple {24319#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {24319#true} is VALID [2022-04-15 17:42:07,388 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} #t~post12 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post12;havoc #t~post12;#t~post13 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post13;havoc #t~post13; {24319#true} is VALID [2022-04-15 17:42:07,388 INFO L272 TraceCheckUtils]: 6: Hoare triple {24319#true} call #t~ret14 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:07,388 INFO L290 TraceCheckUtils]: 7: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-15 17:42:07,388 INFO L290 TraceCheckUtils]: 8: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-15 17:42:07,388 INFO L290 TraceCheckUtils]: 9: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-15 17:42:07,388 INFO L290 TraceCheckUtils]: 10: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-15 17:42:07,388 INFO L290 TraceCheckUtils]: 11: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-15 17:42:07,389 INFO L290 TraceCheckUtils]: 12: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-15 17:42:07,389 INFO L290 TraceCheckUtils]: 13: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-15 17:42:07,389 INFO L290 TraceCheckUtils]: 14: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-15 17:42:07,389 INFO L290 TraceCheckUtils]: 15: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,389 INFO L290 TraceCheckUtils]: 16: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,390 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,391 INFO L290 TraceCheckUtils]: 18: Hoare triple {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;~status~0 := #t~ret14;havoc #t~ret14; {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,391 INFO L290 TraceCheckUtils]: 19: Hoare triple {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,391 INFO L290 TraceCheckUtils]: 20: Hoare triple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,392 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {24319#true} #723#return; {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,393 INFO L272 TraceCheckUtils]: 0: Hoare triple {24319#true} call ULTIMATE.init(); {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:42:07,393 INFO L290 TraceCheckUtils]: 1: Hoare triple {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-15 17:42:07,393 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-15 17:42:07,393 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {24319#true} {24319#true} #783#return; {24319#true} is VALID [2022-04-15 17:42:07,394 INFO L272 TraceCheckUtils]: 4: Hoare triple {24319#true} call #t~ret81 := main(); {24319#true} is VALID [2022-04-15 17:42:07,394 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {24319#true} is VALID [2022-04-15 17:42:07,395 INFO L272 TraceCheckUtils]: 6: Hoare triple {24319#true} call _BLAST_init(); {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:07,395 INFO L290 TraceCheckUtils]: 7: Hoare triple {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-15 17:42:07,395 INFO L290 TraceCheckUtils]: 8: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-15 17:42:07,395 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {24319#true} {24319#true} #715#return; {24319#true} is VALID [2022-04-15 17:42:07,395 INFO L290 TraceCheckUtils]: 10: Hoare triple {24319#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-15 17:42:07,395 INFO L290 TraceCheckUtils]: 11: Hoare triple {24319#true} assume !(0 == ~irp_choice~0); {24319#true} is VALID [2022-04-15 17:42:07,396 INFO L272 TraceCheckUtils]: 12: Hoare triple {24319#true} call stub_driver_init(); {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:07,396 INFO L290 TraceCheckUtils]: 13: Hoare triple {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-15 17:42:07,396 INFO L290 TraceCheckUtils]: 14: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-15 17:42:07,396 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {24319#true} {24319#true} #717#return; {24319#true} is VALID [2022-04-15 17:42:07,396 INFO L290 TraceCheckUtils]: 16: Hoare triple {24319#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {24319#true} is VALID [2022-04-15 17:42:07,396 INFO L290 TraceCheckUtils]: 17: Hoare triple {24319#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {24319#true} is VALID [2022-04-15 17:42:07,396 INFO L290 TraceCheckUtils]: 18: Hoare triple {24319#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {24319#true} is VALID [2022-04-15 17:42:07,396 INFO L290 TraceCheckUtils]: 19: Hoare triple {24319#true} assume 3 == ~tmp_ndt_3~0; {24319#true} is VALID [2022-04-15 17:42:07,397 INFO L272 TraceCheckUtils]: 20: Hoare triple {24319#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:07,397 INFO L290 TraceCheckUtils]: 21: Hoare triple {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {24319#true} is VALID [2022-04-15 17:42:07,397 INFO L290 TraceCheckUtils]: 22: Hoare triple {24319#true} assume !(0 == ~irpStack__MinorFunction~0); {24319#true} is VALID [2022-04-15 17:42:07,397 INFO L290 TraceCheckUtils]: 23: Hoare triple {24319#true} assume 23 == ~irpStack__MinorFunction~0; {24319#true} is VALID [2022-04-15 17:42:07,397 INFO L290 TraceCheckUtils]: 24: Hoare triple {24319#true} ~devExt__SurpriseRemoved~0 := 1; {24319#true} is VALID [2022-04-15 17:42:07,397 INFO L290 TraceCheckUtils]: 25: Hoare triple {24319#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {24319#true} is VALID [2022-04-15 17:42:07,397 INFO L290 TraceCheckUtils]: 26: Hoare triple {24319#true} #t~post12 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post12;havoc #t~post12;#t~post13 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post13;havoc #t~post13; {24319#true} is VALID [2022-04-15 17:42:07,398 INFO L272 TraceCheckUtils]: 27: Hoare triple {24319#true} call #t~ret14 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:07,398 INFO L290 TraceCheckUtils]: 28: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-15 17:42:07,398 INFO L290 TraceCheckUtils]: 29: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-15 17:42:07,398 INFO L290 TraceCheckUtils]: 30: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-15 17:42:07,398 INFO L290 TraceCheckUtils]: 31: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-15 17:42:07,398 INFO L290 TraceCheckUtils]: 32: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-15 17:42:07,398 INFO L290 TraceCheckUtils]: 33: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-15 17:42:07,398 INFO L290 TraceCheckUtils]: 34: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-15 17:42:07,398 INFO L290 TraceCheckUtils]: 35: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-15 17:42:07,399 INFO L290 TraceCheckUtils]: 36: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,399 INFO L290 TraceCheckUtils]: 37: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,400 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,400 INFO L290 TraceCheckUtils]: 39: Hoare triple {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;~status~0 := #t~ret14;havoc #t~ret14; {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,400 INFO L290 TraceCheckUtils]: 40: Hoare triple {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,401 INFO L290 TraceCheckUtils]: 41: Hoare triple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,401 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {24319#true} #723#return; {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,401 INFO L290 TraceCheckUtils]: 43: Hoare triple {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,402 INFO L290 TraceCheckUtils]: 44: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,402 INFO L290 TraceCheckUtils]: 45: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,402 INFO L290 TraceCheckUtils]: 46: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,402 INFO L290 TraceCheckUtils]: 47: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,403 INFO L290 TraceCheckUtils]: 48: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,403 INFO L290 TraceCheckUtils]: 49: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,403 INFO L290 TraceCheckUtils]: 50: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:07,403 INFO L290 TraceCheckUtils]: 51: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {24320#false} is VALID [2022-04-15 17:42:07,403 INFO L272 TraceCheckUtils]: 52: Hoare triple {24320#false} call errorFn(); {24320#false} is VALID [2022-04-15 17:42:07,404 INFO L290 TraceCheckUtils]: 53: Hoare triple {24320#false} assume !false; {24320#false} is VALID [2022-04-15 17:42:07,404 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:42:07,404 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:42:07,404 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [351996099] [2022-04-15 17:42:07,404 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [351996099] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:07,404 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:07,404 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-15 17:42:07,404 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:42:07,404 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [704943897] [2022-04-15 17:42:07,404 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [704943897] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:07,404 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:07,404 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-15 17:42:07,404 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [835780288] [2022-04-15 17:42:07,405 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:42:07,405 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 54 [2022-04-15 17:42:07,405 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:42:07,405 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:07,441 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 54 edges. 54 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:07,441 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-15 17:42:07,441 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:07,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-15 17:42:07,441 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-04-15 17:42:07,442 INFO L87 Difference]: Start difference. First operand 210 states and 273 transitions. Second operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:10,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:10,258 INFO L93 Difference]: Finished difference Result 226 states and 289 transitions. [2022-04-15 17:42:10,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-15 17:42:10,258 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 54 [2022-04-15 17:42:10,258 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:42:10,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:10,260 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 265 transitions. [2022-04-15 17:42:10,260 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:10,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 265 transitions. [2022-04-15 17:42:10,262 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 265 transitions. [2022-04-15 17:42:10,492 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 265 edges. 265 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:10,496 INFO L225 Difference]: With dead ends: 226 [2022-04-15 17:42:10,496 INFO L226 Difference]: Without dead ends: 205 [2022-04-15 17:42:10,496 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-04-15 17:42:10,496 INFO L913 BasicCegarLoop]: 214 mSDtfsCounter, 246 mSDsluCounter, 625 mSDsCounter, 0 mSdLazyCounter, 1286 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 246 SdHoareTripleChecker+Valid, 839 SdHoareTripleChecker+Invalid, 1337 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 1286 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-15 17:42:10,497 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [246 Valid, 839 Invalid, 1337 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 1286 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-15 17:42:10,497 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2022-04-15 17:42:10,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 205. [2022-04-15 17:42:10,830 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:42:10,830 INFO L82 GeneralOperation]: Start isEquivalent. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-15 17:42:10,830 INFO L74 IsIncluded]: Start isIncluded. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-15 17:42:10,831 INFO L87 Difference]: Start difference. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-15 17:42:10,834 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:10,834 INFO L93 Difference]: Finished difference Result 205 states and 266 transitions. [2022-04-15 17:42:10,834 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-15 17:42:10,834 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:10,834 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:10,835 INFO L74 IsIncluded]: Start isIncluded. First operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) Second operand 205 states. [2022-04-15 17:42:10,835 INFO L87 Difference]: Start difference. First operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) Second operand 205 states. [2022-04-15 17:42:10,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:10,838 INFO L93 Difference]: Finished difference Result 205 states and 266 transitions. [2022-04-15 17:42:10,838 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-15 17:42:10,838 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:10,838 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:10,839 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:42:10,839 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:42:10,839 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-15 17:42:10,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 205 states to 205 states and 266 transitions. [2022-04-15 17:42:10,842 INFO L78 Accepts]: Start accepts. Automaton has 205 states and 266 transitions. Word has length 54 [2022-04-15 17:42:10,842 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:42:10,842 INFO L478 AbstractCegarLoop]: Abstraction has 205 states and 266 transitions. [2022-04-15 17:42:10,843 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:10,843 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 205 states and 266 transitions. [2022-04-15 17:42:11,191 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 266 edges. 266 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:11,192 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-15 17:42:11,192 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-15 17:42:11,193 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:42:11,193 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:42:11,193 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-04-15 17:42:11,193 INFO L403 AbstractCegarLoop]: === Iteration 15 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:42:11,193 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:42:11,193 INFO L85 PathProgramCache]: Analyzing trace with hash 432963036, now seen corresponding path program 1 times [2022-04-15 17:42:11,193 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:11,193 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [389398279] [2022-04-15 17:42:11,193 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:42:11,194 INFO L85 PathProgramCache]: Analyzing trace with hash 432963036, now seen corresponding path program 2 times [2022-04-15 17:42:11,194 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:42:11,194 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1891764463] [2022-04-15 17:42:11,194 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:42:11,194 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:42:11,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:11,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:42:11,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:11,264 INFO L290 TraceCheckUtils]: 0: Hoare triple {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-15 17:42:11,264 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-15 17:42:11,264 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #783#return; {25653#true} is VALID [2022-04-15 17:42:11,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:42:11,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:11,287 INFO L290 TraceCheckUtils]: 0: Hoare triple {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-15 17:42:11,287 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-15 17:42:11,288 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #715#return; {25653#true} is VALID [2022-04-15 17:42:11,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:42:11,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:11,303 INFO L290 TraceCheckUtils]: 0: Hoare triple {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-15 17:42:11,303 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-15 17:42:11,303 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #717#return; {25653#true} is VALID [2022-04-15 17:42:11,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-15 17:42:11,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:11,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-15 17:42:11,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:11,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-15 17:42:11,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:11,378 INFO L290 TraceCheckUtils]: 0: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-15 17:42:11,378 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-15 17:42:11,379 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-15 17:42:11,379 INFO L290 TraceCheckUtils]: 0: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-15 17:42:11,379 INFO L272 TraceCheckUtils]: 1: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:11,379 INFO L290 TraceCheckUtils]: 2: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-15 17:42:11,379 INFO L290 TraceCheckUtils]: 3: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-15 17:42:11,380 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-15 17:42:11,380 INFO L290 TraceCheckUtils]: 5: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-15 17:42:11,380 INFO L290 TraceCheckUtils]: 6: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-15 17:42:11,380 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-15 17:42:11,380 INFO L290 TraceCheckUtils]: 0: Hoare triple {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {25653#true} is VALID [2022-04-15 17:42:11,380 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume 0 != ~compRegistered~0; {25653#true} is VALID [2022-04-15 17:42:11,381 INFO L272 TraceCheckUtils]: 2: Hoare triple {25653#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:11,381 INFO L290 TraceCheckUtils]: 3: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-15 17:42:11,381 INFO L272 TraceCheckUtils]: 4: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:11,381 INFO L290 TraceCheckUtils]: 5: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-15 17:42:11,381 INFO L290 TraceCheckUtils]: 6: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-15 17:42:11,381 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-15 17:42:11,381 INFO L290 TraceCheckUtils]: 8: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-15 17:42:11,381 INFO L290 TraceCheckUtils]: 9: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-15 17:42:11,381 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-15 17:42:11,382 INFO L290 TraceCheckUtils]: 11: Hoare triple {25653#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {25653#true} is VALID [2022-04-15 17:42:11,382 INFO L290 TraceCheckUtils]: 12: Hoare triple {25653#true} assume !(-1073741802 == ~__cil_tmp7~0); {25653#true} is VALID [2022-04-15 17:42:11,382 INFO L290 TraceCheckUtils]: 13: Hoare triple {25653#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {25653#true} is VALID [2022-04-15 17:42:11,382 INFO L290 TraceCheckUtils]: 14: Hoare triple {25653#true} assume 0 == ~tmp_ndt_6~0; {25653#true} is VALID [2022-04-15 17:42:11,382 INFO L290 TraceCheckUtils]: 15: Hoare triple {25653#true} ~returnVal2~0 := 0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:11,382 INFO L290 TraceCheckUtils]: 16: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:11,383 INFO L290 TraceCheckUtils]: 17: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-15 17:42:11,383 INFO L290 TraceCheckUtils]: 18: Hoare triple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-15 17:42:11,384 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {25653#true} #755#return; {25684#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-15 17:42:11,385 INFO L272 TraceCheckUtils]: 0: Hoare triple {25653#true} call ULTIMATE.init(); {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:42:11,385 INFO L290 TraceCheckUtils]: 1: Hoare triple {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-15 17:42:11,385 INFO L290 TraceCheckUtils]: 2: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-15 17:42:11,385 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {25653#true} {25653#true} #783#return; {25653#true} is VALID [2022-04-15 17:42:11,385 INFO L272 TraceCheckUtils]: 4: Hoare triple {25653#true} call #t~ret81 := main(); {25653#true} is VALID [2022-04-15 17:42:11,385 INFO L290 TraceCheckUtils]: 5: Hoare triple {25653#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {25653#true} is VALID [2022-04-15 17:42:11,386 INFO L272 TraceCheckUtils]: 6: Hoare triple {25653#true} call _BLAST_init(); {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:11,386 INFO L290 TraceCheckUtils]: 7: Hoare triple {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-15 17:42:11,386 INFO L290 TraceCheckUtils]: 8: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-15 17:42:11,386 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {25653#true} {25653#true} #715#return; {25653#true} is VALID [2022-04-15 17:42:11,386 INFO L290 TraceCheckUtils]: 10: Hoare triple {25653#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-15 17:42:11,386 INFO L290 TraceCheckUtils]: 11: Hoare triple {25653#true} assume !(0 == ~irp_choice~0); {25653#true} is VALID [2022-04-15 17:42:11,387 INFO L272 TraceCheckUtils]: 12: Hoare triple {25653#true} call stub_driver_init(); {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:11,387 INFO L290 TraceCheckUtils]: 13: Hoare triple {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-15 17:42:11,387 INFO L290 TraceCheckUtils]: 14: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-15 17:42:11,387 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {25653#true} {25653#true} #717#return; {25653#true} is VALID [2022-04-15 17:42:11,387 INFO L290 TraceCheckUtils]: 16: Hoare triple {25653#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {25653#true} is VALID [2022-04-15 17:42:11,387 INFO L290 TraceCheckUtils]: 17: Hoare triple {25653#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {25653#true} is VALID [2022-04-15 17:42:11,387 INFO L290 TraceCheckUtils]: 18: Hoare triple {25653#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {25653#true} is VALID [2022-04-15 17:42:11,387 INFO L290 TraceCheckUtils]: 19: Hoare triple {25653#true} assume 3 == ~tmp_ndt_3~0; {25653#true} is VALID [2022-04-15 17:42:11,387 INFO L272 TraceCheckUtils]: 20: Hoare triple {25653#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {25653#true} is VALID [2022-04-15 17:42:11,387 INFO L290 TraceCheckUtils]: 21: Hoare triple {25653#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {25653#true} is VALID [2022-04-15 17:42:11,388 INFO L290 TraceCheckUtils]: 22: Hoare triple {25653#true} assume 0 == ~irpStack__MinorFunction~0; {25653#true} is VALID [2022-04-15 17:42:11,388 INFO L290 TraceCheckUtils]: 23: Hoare triple {25653#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {25653#true} is VALID [2022-04-15 17:42:11,388 INFO L290 TraceCheckUtils]: 24: Hoare triple {25653#true} assume !(~s~0 != ~NP~0); {25653#true} is VALID [2022-04-15 17:42:11,388 INFO L290 TraceCheckUtils]: 25: Hoare triple {25653#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {25653#true} is VALID [2022-04-15 17:42:11,388 INFO L290 TraceCheckUtils]: 26: Hoare triple {25653#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {25653#true} is VALID [2022-04-15 17:42:11,388 INFO L272 TraceCheckUtils]: 27: Hoare triple {25653#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:11,388 INFO L290 TraceCheckUtils]: 28: Hoare triple {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {25653#true} is VALID [2022-04-15 17:42:11,388 INFO L290 TraceCheckUtils]: 29: Hoare triple {25653#true} assume 0 != ~compRegistered~0; {25653#true} is VALID [2022-04-15 17:42:11,389 INFO L272 TraceCheckUtils]: 30: Hoare triple {25653#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:11,389 INFO L290 TraceCheckUtils]: 31: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-15 17:42:11,389 INFO L272 TraceCheckUtils]: 32: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:11,389 INFO L290 TraceCheckUtils]: 33: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-15 17:42:11,390 INFO L290 TraceCheckUtils]: 34: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-15 17:42:11,390 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-15 17:42:11,390 INFO L290 TraceCheckUtils]: 36: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-15 17:42:11,390 INFO L290 TraceCheckUtils]: 37: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-15 17:42:11,390 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-15 17:42:11,390 INFO L290 TraceCheckUtils]: 39: Hoare triple {25653#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {25653#true} is VALID [2022-04-15 17:42:11,390 INFO L290 TraceCheckUtils]: 40: Hoare triple {25653#true} assume !(-1073741802 == ~__cil_tmp7~0); {25653#true} is VALID [2022-04-15 17:42:11,390 INFO L290 TraceCheckUtils]: 41: Hoare triple {25653#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {25653#true} is VALID [2022-04-15 17:42:11,390 INFO L290 TraceCheckUtils]: 42: Hoare triple {25653#true} assume 0 == ~tmp_ndt_6~0; {25653#true} is VALID [2022-04-15 17:42:11,390 INFO L290 TraceCheckUtils]: 43: Hoare triple {25653#true} ~returnVal2~0 := 0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:11,391 INFO L290 TraceCheckUtils]: 44: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:11,391 INFO L290 TraceCheckUtils]: 45: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-15 17:42:11,391 INFO L290 TraceCheckUtils]: 46: Hoare triple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-15 17:42:11,392 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {25653#true} #755#return; {25684#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-15 17:42:11,392 INFO L290 TraceCheckUtils]: 48: Hoare triple {25684#(= |KbFilter_PnP_#t~ret10| 0)} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {25685#(= KbFilter_PnP_~__cil_tmp23~0 0)} is VALID [2022-04-15 17:42:11,392 INFO L290 TraceCheckUtils]: 49: Hoare triple {25685#(= KbFilter_PnP_~__cil_tmp23~0 0)} assume 259 == ~__cil_tmp23~0; {25654#false} is VALID [2022-04-15 17:42:11,393 INFO L272 TraceCheckUtils]: 50: Hoare triple {25654#false} call #t~ret11 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {25654#false} is VALID [2022-04-15 17:42:11,393 INFO L290 TraceCheckUtils]: 51: Hoare triple {25654#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {25654#false} is VALID [2022-04-15 17:42:11,393 INFO L290 TraceCheckUtils]: 52: Hoare triple {25654#false} assume !(~s~0 == ~MPR3~0); {25654#false} is VALID [2022-04-15 17:42:11,393 INFO L290 TraceCheckUtils]: 53: Hoare triple {25654#false} assume !(1 == ~customIrp~0); {25654#false} is VALID [2022-04-15 17:42:11,393 INFO L290 TraceCheckUtils]: 54: Hoare triple {25654#false} assume ~s~0 == ~MPR3~0; {25654#false} is VALID [2022-04-15 17:42:11,393 INFO L272 TraceCheckUtils]: 55: Hoare triple {25654#false} call errorFn(); {25654#false} is VALID [2022-04-15 17:42:11,393 INFO L290 TraceCheckUtils]: 56: Hoare triple {25654#false} assume !false; {25654#false} is VALID [2022-04-15 17:42:11,393 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:42:11,393 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:42:11,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1891764463] [2022-04-15 17:42:11,393 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1891764463] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:11,393 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:11,393 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-15 17:42:11,394 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:42:11,394 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [389398279] [2022-04-15 17:42:11,394 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [389398279] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:11,394 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:11,394 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-15 17:42:11,394 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [367951085] [2022-04-15 17:42:11,394 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:42:11,395 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-15 17:42:11,395 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:42:11,395 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:11,427 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:11,427 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-15 17:42:11,427 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:11,427 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-15 17:42:11,427 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-15 17:42:11,428 INFO L87 Difference]: Start difference. First operand 205 states and 266 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:13,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:13,607 INFO L93 Difference]: Finished difference Result 263 states and 337 transitions. [2022-04-15 17:42:13,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-15 17:42:13,608 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-15 17:42:13,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:42:13,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:13,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 302 transitions. [2022-04-15 17:42:13,610 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:13,611 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 302 transitions. [2022-04-15 17:42:13,612 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 302 transitions. [2022-04-15 17:42:13,929 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 302 edges. 302 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:13,933 INFO L225 Difference]: With dead ends: 263 [2022-04-15 17:42:13,933 INFO L226 Difference]: Without dead ends: 222 [2022-04-15 17:42:13,934 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-04-15 17:42:13,935 INFO L913 BasicCegarLoop]: 203 mSDtfsCounter, 155 mSDsluCounter, 448 mSDsCounter, 0 mSdLazyCounter, 796 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 651 SdHoareTripleChecker+Invalid, 837 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 796 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-15 17:42:13,936 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [155 Valid, 651 Invalid, 837 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 796 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-15 17:42:13,936 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2022-04-15 17:42:14,246 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 210. [2022-04-15 17:42:14,246 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:42:14,247 INFO L82 GeneralOperation]: Start isEquivalent. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-15 17:42:14,247 INFO L74 IsIncluded]: Start isIncluded. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-15 17:42:14,247 INFO L87 Difference]: Start difference. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-15 17:42:14,251 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:14,251 INFO L93 Difference]: Finished difference Result 222 states and 287 transitions. [2022-04-15 17:42:14,251 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 287 transitions. [2022-04-15 17:42:14,251 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:14,251 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:14,252 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 222 states. [2022-04-15 17:42:14,252 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 222 states. [2022-04-15 17:42:14,255 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:14,255 INFO L93 Difference]: Finished difference Result 222 states and 287 transitions. [2022-04-15 17:42:14,255 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 287 transitions. [2022-04-15 17:42:14,256 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:14,256 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:14,256 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:42:14,256 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:42:14,256 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-15 17:42:14,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 271 transitions. [2022-04-15 17:42:14,259 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 271 transitions. Word has length 57 [2022-04-15 17:42:14,259 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:42:14,260 INFO L478 AbstractCegarLoop]: Abstraction has 210 states and 271 transitions. [2022-04-15 17:42:14,260 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:14,260 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 271 transitions. [2022-04-15 17:42:14,609 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 271 edges. 271 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:14,609 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 271 transitions. [2022-04-15 17:42:14,610 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-15 17:42:14,610 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:42:14,610 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:42:14,610 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-04-15 17:42:14,611 INFO L403 AbstractCegarLoop]: === Iteration 16 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:42:14,611 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:42:14,611 INFO L85 PathProgramCache]: Analyzing trace with hash 1039954733, now seen corresponding path program 1 times [2022-04-15 17:42:14,611 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:14,611 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1720930142] [2022-04-15 17:42:14,612 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:42:14,612 INFO L85 PathProgramCache]: Analyzing trace with hash 1039954733, now seen corresponding path program 2 times [2022-04-15 17:42:14,612 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:42:14,612 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [899277466] [2022-04-15 17:42:14,612 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:42:14,612 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:42:14,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:14,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:42:14,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:14,708 INFO L290 TraceCheckUtils]: 0: Hoare triple {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-15 17:42:14,708 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-15 17:42:14,708 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #783#return; {27104#true} is VALID [2022-04-15 17:42:14,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:42:14,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:14,730 INFO L290 TraceCheckUtils]: 0: Hoare triple {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-15 17:42:14,730 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-15 17:42:14,730 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #715#return; {27104#true} is VALID [2022-04-15 17:42:14,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:42:14,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:14,744 INFO L290 TraceCheckUtils]: 0: Hoare triple {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-15 17:42:14,744 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-15 17:42:14,744 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #717#return; {27104#true} is VALID [2022-04-15 17:42:14,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-15 17:42:14,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:14,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-15 17:42:14,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:14,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-15 17:42:14,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:14,834 INFO L290 TraceCheckUtils]: 0: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-15 17:42:14,835 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-15 17:42:14,835 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-15 17:42:14,835 INFO L290 TraceCheckUtils]: 0: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-15 17:42:14,835 INFO L272 TraceCheckUtils]: 1: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:14,835 INFO L290 TraceCheckUtils]: 2: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-15 17:42:14,836 INFO L290 TraceCheckUtils]: 3: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-15 17:42:14,836 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-15 17:42:14,836 INFO L290 TraceCheckUtils]: 5: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-15 17:42:14,836 INFO L290 TraceCheckUtils]: 6: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-15 17:42:14,836 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-15 17:42:14,836 INFO L290 TraceCheckUtils]: 0: Hoare triple {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {27104#true} is VALID [2022-04-15 17:42:14,836 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume 0 != ~compRegistered~0; {27104#true} is VALID [2022-04-15 17:42:14,837 INFO L272 TraceCheckUtils]: 2: Hoare triple {27104#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:14,837 INFO L290 TraceCheckUtils]: 3: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-15 17:42:14,837 INFO L272 TraceCheckUtils]: 4: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:14,837 INFO L290 TraceCheckUtils]: 5: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-15 17:42:14,837 INFO L290 TraceCheckUtils]: 6: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-15 17:42:14,837 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-15 17:42:14,837 INFO L290 TraceCheckUtils]: 8: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-15 17:42:14,838 INFO L290 TraceCheckUtils]: 9: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-15 17:42:14,838 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-15 17:42:14,838 INFO L290 TraceCheckUtils]: 11: Hoare triple {27104#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {27104#true} is VALID [2022-04-15 17:42:14,838 INFO L290 TraceCheckUtils]: 12: Hoare triple {27104#true} assume !(-1073741802 == ~__cil_tmp7~0); {27104#true} is VALID [2022-04-15 17:42:14,838 INFO L290 TraceCheckUtils]: 13: Hoare triple {27104#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {27104#true} is VALID [2022-04-15 17:42:14,838 INFO L290 TraceCheckUtils]: 14: Hoare triple {27104#true} assume 0 == ~tmp_ndt_6~0; {27104#true} is VALID [2022-04-15 17:42:14,838 INFO L290 TraceCheckUtils]: 15: Hoare triple {27104#true} ~returnVal2~0 := 0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:14,839 INFO L290 TraceCheckUtils]: 16: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:14,839 INFO L290 TraceCheckUtils]: 17: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-15 17:42:14,839 INFO L290 TraceCheckUtils]: 18: Hoare triple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-15 17:42:14,840 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {27104#true} #755#return; {27135#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-15 17:42:14,841 INFO L272 TraceCheckUtils]: 0: Hoare triple {27104#true} call ULTIMATE.init(); {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:42:14,841 INFO L290 TraceCheckUtils]: 1: Hoare triple {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-15 17:42:14,842 INFO L290 TraceCheckUtils]: 2: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-15 17:42:14,842 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {27104#true} {27104#true} #783#return; {27104#true} is VALID [2022-04-15 17:42:14,842 INFO L272 TraceCheckUtils]: 4: Hoare triple {27104#true} call #t~ret81 := main(); {27104#true} is VALID [2022-04-15 17:42:14,842 INFO L290 TraceCheckUtils]: 5: Hoare triple {27104#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {27104#true} is VALID [2022-04-15 17:42:14,843 INFO L272 TraceCheckUtils]: 6: Hoare triple {27104#true} call _BLAST_init(); {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:14,843 INFO L290 TraceCheckUtils]: 7: Hoare triple {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-15 17:42:14,843 INFO L290 TraceCheckUtils]: 8: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-15 17:42:14,843 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {27104#true} {27104#true} #715#return; {27104#true} is VALID [2022-04-15 17:42:14,843 INFO L290 TraceCheckUtils]: 10: Hoare triple {27104#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-15 17:42:14,843 INFO L290 TraceCheckUtils]: 11: Hoare triple {27104#true} assume !(0 == ~irp_choice~0); {27104#true} is VALID [2022-04-15 17:42:14,843 INFO L272 TraceCheckUtils]: 12: Hoare triple {27104#true} call stub_driver_init(); {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:14,843 INFO L290 TraceCheckUtils]: 13: Hoare triple {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-15 17:42:14,844 INFO L290 TraceCheckUtils]: 14: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-15 17:42:14,844 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {27104#true} {27104#true} #717#return; {27104#true} is VALID [2022-04-15 17:42:14,844 INFO L290 TraceCheckUtils]: 16: Hoare triple {27104#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {27104#true} is VALID [2022-04-15 17:42:14,844 INFO L290 TraceCheckUtils]: 17: Hoare triple {27104#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {27104#true} is VALID [2022-04-15 17:42:14,844 INFO L290 TraceCheckUtils]: 18: Hoare triple {27104#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {27104#true} is VALID [2022-04-15 17:42:14,844 INFO L290 TraceCheckUtils]: 19: Hoare triple {27104#true} assume 3 == ~tmp_ndt_3~0; {27104#true} is VALID [2022-04-15 17:42:14,844 INFO L272 TraceCheckUtils]: 20: Hoare triple {27104#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {27104#true} is VALID [2022-04-15 17:42:14,844 INFO L290 TraceCheckUtils]: 21: Hoare triple {27104#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {27104#true} is VALID [2022-04-15 17:42:14,844 INFO L290 TraceCheckUtils]: 22: Hoare triple {27104#true} assume 0 == ~irpStack__MinorFunction~0; {27104#true} is VALID [2022-04-15 17:42:14,844 INFO L290 TraceCheckUtils]: 23: Hoare triple {27104#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {27104#true} is VALID [2022-04-15 17:42:14,844 INFO L290 TraceCheckUtils]: 24: Hoare triple {27104#true} assume !(~s~0 != ~NP~0); {27104#true} is VALID [2022-04-15 17:42:14,844 INFO L290 TraceCheckUtils]: 25: Hoare triple {27104#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {27104#true} is VALID [2022-04-15 17:42:14,844 INFO L290 TraceCheckUtils]: 26: Hoare triple {27104#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {27104#true} is VALID [2022-04-15 17:42:14,845 INFO L272 TraceCheckUtils]: 27: Hoare triple {27104#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:14,845 INFO L290 TraceCheckUtils]: 28: Hoare triple {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {27104#true} is VALID [2022-04-15 17:42:14,845 INFO L290 TraceCheckUtils]: 29: Hoare triple {27104#true} assume 0 != ~compRegistered~0; {27104#true} is VALID [2022-04-15 17:42:14,845 INFO L272 TraceCheckUtils]: 30: Hoare triple {27104#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:14,846 INFO L290 TraceCheckUtils]: 31: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-15 17:42:14,846 INFO L272 TraceCheckUtils]: 32: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:14,846 INFO L290 TraceCheckUtils]: 33: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-15 17:42:14,846 INFO L290 TraceCheckUtils]: 34: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-15 17:42:14,846 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-15 17:42:14,846 INFO L290 TraceCheckUtils]: 36: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-15 17:42:14,846 INFO L290 TraceCheckUtils]: 37: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-15 17:42:14,846 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-15 17:42:14,846 INFO L290 TraceCheckUtils]: 39: Hoare triple {27104#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {27104#true} is VALID [2022-04-15 17:42:14,846 INFO L290 TraceCheckUtils]: 40: Hoare triple {27104#true} assume !(-1073741802 == ~__cil_tmp7~0); {27104#true} is VALID [2022-04-15 17:42:14,847 INFO L290 TraceCheckUtils]: 41: Hoare triple {27104#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {27104#true} is VALID [2022-04-15 17:42:14,847 INFO L290 TraceCheckUtils]: 42: Hoare triple {27104#true} assume 0 == ~tmp_ndt_6~0; {27104#true} is VALID [2022-04-15 17:42:14,847 INFO L290 TraceCheckUtils]: 43: Hoare triple {27104#true} ~returnVal2~0 := 0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:14,847 INFO L290 TraceCheckUtils]: 44: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:14,848 INFO L290 TraceCheckUtils]: 45: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-15 17:42:14,848 INFO L290 TraceCheckUtils]: 46: Hoare triple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-15 17:42:14,848 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {27104#true} #755#return; {27135#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-15 17:42:14,849 INFO L290 TraceCheckUtils]: 48: Hoare triple {27135#(= |KbFilter_PnP_#t~ret10| 0)} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {27136#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-15 17:42:14,849 INFO L290 TraceCheckUtils]: 49: Hoare triple {27136#(= KbFilter_PnP_~status~0 0)} assume !(259 == ~__cil_tmp23~0); {27136#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-15 17:42:14,849 INFO L290 TraceCheckUtils]: 50: Hoare triple {27136#(= KbFilter_PnP_~status~0 0)} assume !(~status~0 >= 0); {27105#false} is VALID [2022-04-15 17:42:14,849 INFO L290 TraceCheckUtils]: 51: Hoare triple {27105#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {27105#false} is VALID [2022-04-15 17:42:14,849 INFO L272 TraceCheckUtils]: 52: Hoare triple {27105#false} call IofCompleteRequest(~Irp, 0); {27105#false} is VALID [2022-04-15 17:42:14,850 INFO L290 TraceCheckUtils]: 53: Hoare triple {27105#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {27105#false} is VALID [2022-04-15 17:42:14,850 INFO L290 TraceCheckUtils]: 54: Hoare triple {27105#false} assume !(~s~0 == ~NP~0); {27105#false} is VALID [2022-04-15 17:42:14,850 INFO L272 TraceCheckUtils]: 55: Hoare triple {27105#false} call errorFn(); {27105#false} is VALID [2022-04-15 17:42:14,850 INFO L290 TraceCheckUtils]: 56: Hoare triple {27105#false} assume !false; {27105#false} is VALID [2022-04-15 17:42:14,850 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:42:14,850 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:42:14,850 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [899277466] [2022-04-15 17:42:14,863 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [899277466] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:14,863 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:14,863 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-15 17:42:14,863 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:42:14,863 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1720930142] [2022-04-15 17:42:14,864 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1720930142] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:14,864 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:14,864 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-15 17:42:14,864 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [886167766] [2022-04-15 17:42:14,864 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:42:14,864 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-15 17:42:14,864 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:42:14,864 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:14,900 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:14,901 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-15 17:42:14,901 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:14,901 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-15 17:42:14,901 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-15 17:42:14,901 INFO L87 Difference]: Start difference. First operand 210 states and 271 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:17,062 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:17,062 INFO L93 Difference]: Finished difference Result 230 states and 294 transitions. [2022-04-15 17:42:17,062 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-04-15 17:42:17,063 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-15 17:42:17,063 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:42:17,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:17,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 273 transitions. [2022-04-15 17:42:17,065 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:17,068 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 273 transitions. [2022-04-15 17:42:17,068 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 15 states and 273 transitions. [2022-04-15 17:42:17,318 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 273 edges. 273 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:17,322 INFO L225 Difference]: With dead ends: 230 [2022-04-15 17:42:17,322 INFO L226 Difference]: Without dead ends: 223 [2022-04-15 17:42:17,322 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=77, Invalid=265, Unknown=0, NotChecked=0, Total=342 [2022-04-15 17:42:17,322 INFO L913 BasicCegarLoop]: 202 mSDtfsCounter, 320 mSDsluCounter, 412 mSDsCounter, 0 mSdLazyCounter, 702 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 320 SdHoareTripleChecker+Valid, 614 SdHoareTripleChecker+Invalid, 775 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 702 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-15 17:42:17,323 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [320 Valid, 614 Invalid, 775 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 702 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-15 17:42:17,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2022-04-15 17:42:17,694 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 211. [2022-04-15 17:42:17,695 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:42:17,695 INFO L82 GeneralOperation]: Start isEquivalent. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-15 17:42:17,695 INFO L74 IsIncluded]: Start isIncluded. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-15 17:42:17,695 INFO L87 Difference]: Start difference. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-15 17:42:17,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:17,699 INFO L93 Difference]: Finished difference Result 223 states and 287 transitions. [2022-04-15 17:42:17,699 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 287 transitions. [2022-04-15 17:42:17,699 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:17,699 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:17,700 INFO L74 IsIncluded]: Start isIncluded. First operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 223 states. [2022-04-15 17:42:17,700 INFO L87 Difference]: Start difference. First operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 223 states. [2022-04-15 17:42:17,703 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:17,703 INFO L93 Difference]: Finished difference Result 223 states and 287 transitions. [2022-04-15 17:42:17,703 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 287 transitions. [2022-04-15 17:42:17,704 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:17,704 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:17,704 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:42:17,704 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:42:17,704 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-15 17:42:17,707 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 272 transitions. [2022-04-15 17:42:17,707 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 272 transitions. Word has length 57 [2022-04-15 17:42:17,708 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:42:17,708 INFO L478 AbstractCegarLoop]: Abstraction has 211 states and 272 transitions. [2022-04-15 17:42:17,708 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:17,708 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 211 states and 272 transitions. [2022-04-15 17:42:18,026 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 272 edges. 272 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:18,026 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 272 transitions. [2022-04-15 17:42:18,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-04-15 17:42:18,027 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:42:18,027 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:42:18,027 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-04-15 17:42:18,027 INFO L403 AbstractCegarLoop]: === Iteration 17 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:42:18,028 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:42:18,028 INFO L85 PathProgramCache]: Analyzing trace with hash -722543360, now seen corresponding path program 1 times [2022-04-15 17:42:18,028 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:18,028 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1531002135] [2022-04-15 17:42:18,028 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:42:18,028 INFO L85 PathProgramCache]: Analyzing trace with hash -722543360, now seen corresponding path program 2 times [2022-04-15 17:42:18,028 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:42:18,028 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [283323267] [2022-04-15 17:42:18,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:42:18,028 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:42:18,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:18,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:42:18,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:18,092 INFO L290 TraceCheckUtils]: 0: Hoare triple {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-15 17:42:18,093 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-15 17:42:18,093 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #783#return; {28502#true} is VALID [2022-04-15 17:42:18,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:42:18,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:18,114 INFO L290 TraceCheckUtils]: 0: Hoare triple {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-15 17:42:18,114 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-15 17:42:18,114 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #715#return; {28502#true} is VALID [2022-04-15 17:42:18,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:42:18,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:18,125 INFO L290 TraceCheckUtils]: 0: Hoare triple {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-15 17:42:18,125 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-15 17:42:18,125 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #717#return; {28502#true} is VALID [2022-04-15 17:42:18,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-15 17:42:18,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:18,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-15 17:42:18,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:18,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-15 17:42:18,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:18,171 INFO L290 TraceCheckUtils]: 0: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-15 17:42:18,171 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-15 17:42:18,172 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-15 17:42:18,172 INFO L290 TraceCheckUtils]: 3: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-15 17:42:18,172 INFO L290 TraceCheckUtils]: 4: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-15 17:42:18,172 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-15 17:42:18,172 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-15 17:42:18,172 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-15 17:42:18,172 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-15 17:42:18,172 INFO L290 TraceCheckUtils]: 9: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-15 17:42:18,172 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-15 17:42:18,172 INFO L290 TraceCheckUtils]: 0: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-15 17:42:18,172 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-15 17:42:18,172 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-15 17:42:18,173 INFO L272 TraceCheckUtils]: 3: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:18,173 INFO L290 TraceCheckUtils]: 4: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-15 17:42:18,173 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-15 17:42:18,173 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-15 17:42:18,173 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-15 17:42:18,173 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-15 17:42:18,173 INFO L290 TraceCheckUtils]: 9: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-15 17:42:18,173 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-15 17:42:18,173 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-15 17:42:18,174 INFO L290 TraceCheckUtils]: 12: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-15 17:42:18,174 INFO L290 TraceCheckUtils]: 13: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-15 17:42:18,174 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-15 17:42:18,174 INFO L290 TraceCheckUtils]: 15: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-15 17:42:18,174 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-15 17:42:18,174 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-15 17:42:18,174 INFO L290 TraceCheckUtils]: 0: Hoare triple {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {28502#true} is VALID [2022-04-15 17:42:18,174 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {28502#true} is VALID [2022-04-15 17:42:18,174 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} is VALID [2022-04-15 17:42:18,175 INFO L290 TraceCheckUtils]: 3: Hoare triple {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} assume !(~status~3 < 0); {28503#false} is VALID [2022-04-15 17:42:18,175 INFO L272 TraceCheckUtils]: 4: Hoare triple {28503#false} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:18,175 INFO L290 TraceCheckUtils]: 5: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-15 17:42:18,175 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-15 17:42:18,175 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-15 17:42:18,176 INFO L272 TraceCheckUtils]: 8: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:18,176 INFO L290 TraceCheckUtils]: 9: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-15 17:42:18,176 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-15 17:42:18,176 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-15 17:42:18,176 INFO L290 TraceCheckUtils]: 12: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-15 17:42:18,176 INFO L290 TraceCheckUtils]: 13: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-15 17:42:18,176 INFO L290 TraceCheckUtils]: 14: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-15 17:42:18,176 INFO L290 TraceCheckUtils]: 15: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-15 17:42:18,176 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-15 17:42:18,176 INFO L290 TraceCheckUtils]: 17: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-15 17:42:18,176 INFO L290 TraceCheckUtils]: 18: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-15 17:42:18,176 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-15 17:42:18,176 INFO L290 TraceCheckUtils]: 20: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-15 17:42:18,176 INFO L290 TraceCheckUtils]: 21: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-15 17:42:18,176 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-15 17:42:18,177 INFO L290 TraceCheckUtils]: 23: Hoare triple {28503#false} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {28503#false} is VALID [2022-04-15 17:42:18,177 INFO L290 TraceCheckUtils]: 24: Hoare triple {28503#false} assume true; {28503#false} is VALID [2022-04-15 17:42:18,177 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {28503#false} {28502#true} #727#return; {28503#false} is VALID [2022-04-15 17:42:18,178 INFO L272 TraceCheckUtils]: 0: Hoare triple {28502#true} call ULTIMATE.init(); {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:42:18,178 INFO L290 TraceCheckUtils]: 1: Hoare triple {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-15 17:42:18,178 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-15 17:42:18,178 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {28502#true} {28502#true} #783#return; {28502#true} is VALID [2022-04-15 17:42:18,178 INFO L272 TraceCheckUtils]: 4: Hoare triple {28502#true} call #t~ret81 := main(); {28502#true} is VALID [2022-04-15 17:42:18,178 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {28502#true} is VALID [2022-04-15 17:42:18,179 INFO L272 TraceCheckUtils]: 6: Hoare triple {28502#true} call _BLAST_init(); {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:18,179 INFO L290 TraceCheckUtils]: 7: Hoare triple {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-15 17:42:18,179 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-15 17:42:18,179 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {28502#true} {28502#true} #715#return; {28502#true} is VALID [2022-04-15 17:42:18,179 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-15 17:42:18,179 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} assume !(0 == ~irp_choice~0); {28502#true} is VALID [2022-04-15 17:42:18,180 INFO L272 TraceCheckUtils]: 12: Hoare triple {28502#true} call stub_driver_init(); {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:18,180 INFO L290 TraceCheckUtils]: 13: Hoare triple {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-15 17:42:18,180 INFO L290 TraceCheckUtils]: 14: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-15 17:42:18,180 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {28502#true} {28502#true} #717#return; {28502#true} is VALID [2022-04-15 17:42:18,180 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {28502#true} is VALID [2022-04-15 17:42:18,180 INFO L290 TraceCheckUtils]: 17: Hoare triple {28502#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {28502#true} is VALID [2022-04-15 17:42:18,180 INFO L290 TraceCheckUtils]: 18: Hoare triple {28502#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {28502#true} is VALID [2022-04-15 17:42:18,180 INFO L290 TraceCheckUtils]: 19: Hoare triple {28502#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {28502#true} is VALID [2022-04-15 17:42:18,180 INFO L290 TraceCheckUtils]: 20: Hoare triple {28502#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {28502#true} is VALID [2022-04-15 17:42:18,180 INFO L290 TraceCheckUtils]: 21: Hoare triple {28502#true} assume 8 == ~tmp_ndt_5~0; {28502#true} is VALID [2022-04-15 17:42:18,181 INFO L272 TraceCheckUtils]: 22: Hoare triple {28502#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:18,181 INFO L290 TraceCheckUtils]: 23: Hoare triple {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {28502#true} is VALID [2022-04-15 17:42:18,181 INFO L290 TraceCheckUtils]: 24: Hoare triple {28502#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {28502#true} is VALID [2022-04-15 17:42:18,181 INFO L290 TraceCheckUtils]: 25: Hoare triple {28502#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} is VALID [2022-04-15 17:42:18,181 INFO L290 TraceCheckUtils]: 26: Hoare triple {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} assume !(~status~3 < 0); {28503#false} is VALID [2022-04-15 17:42:18,181 INFO L272 TraceCheckUtils]: 27: Hoare triple {28503#false} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:18,182 INFO L290 TraceCheckUtils]: 28: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-15 17:42:18,182 INFO L290 TraceCheckUtils]: 29: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-15 17:42:18,182 INFO L290 TraceCheckUtils]: 30: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-15 17:42:18,182 INFO L272 TraceCheckUtils]: 31: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:18,182 INFO L290 TraceCheckUtils]: 32: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-15 17:42:18,182 INFO L290 TraceCheckUtils]: 33: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-15 17:42:18,182 INFO L290 TraceCheckUtils]: 34: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-15 17:42:18,182 INFO L290 TraceCheckUtils]: 35: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-15 17:42:18,182 INFO L290 TraceCheckUtils]: 36: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-15 17:42:18,183 INFO L290 TraceCheckUtils]: 37: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-15 17:42:18,183 INFO L290 TraceCheckUtils]: 38: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-15 17:42:18,183 INFO L290 TraceCheckUtils]: 39: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-15 17:42:18,183 INFO L290 TraceCheckUtils]: 40: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-15 17:42:18,183 INFO L290 TraceCheckUtils]: 41: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-15 17:42:18,183 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-15 17:42:18,183 INFO L290 TraceCheckUtils]: 43: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-15 17:42:18,183 INFO L290 TraceCheckUtils]: 44: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-15 17:42:18,183 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-15 17:42:18,183 INFO L290 TraceCheckUtils]: 46: Hoare triple {28503#false} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {28503#false} is VALID [2022-04-15 17:42:18,183 INFO L290 TraceCheckUtils]: 47: Hoare triple {28503#false} assume true; {28503#false} is VALID [2022-04-15 17:42:18,183 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {28503#false} {28502#true} #727#return; {28503#false} is VALID [2022-04-15 17:42:18,183 INFO L290 TraceCheckUtils]: 49: Hoare triple {28503#false} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {28503#false} is VALID [2022-04-15 17:42:18,183 INFO L290 TraceCheckUtils]: 50: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-15 17:42:18,183 INFO L290 TraceCheckUtils]: 51: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-15 17:42:18,183 INFO L290 TraceCheckUtils]: 52: Hoare triple {28503#false} assume ~s~0 != ~UNLOADED~0; {28503#false} is VALID [2022-04-15 17:42:18,183 INFO L290 TraceCheckUtils]: 53: Hoare triple {28503#false} assume -1 != ~status~1; {28503#false} is VALID [2022-04-15 17:42:18,184 INFO L290 TraceCheckUtils]: 54: Hoare triple {28503#false} assume !(~s~0 != ~SKIP2~0); {28503#false} is VALID [2022-04-15 17:42:18,184 INFO L290 TraceCheckUtils]: 55: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-15 17:42:18,184 INFO L290 TraceCheckUtils]: 56: Hoare triple {28503#false} assume !(~s~0 == ~DC~0); {28503#false} is VALID [2022-04-15 17:42:18,184 INFO L290 TraceCheckUtils]: 57: Hoare triple {28503#false} assume ~status~1 != ~lowerDriverReturn~0; {28503#false} is VALID [2022-04-15 17:42:18,184 INFO L272 TraceCheckUtils]: 58: Hoare triple {28503#false} call errorFn(); {28503#false} is VALID [2022-04-15 17:42:18,184 INFO L290 TraceCheckUtils]: 59: Hoare triple {28503#false} assume !false; {28503#false} is VALID [2022-04-15 17:42:18,184 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:42:18,184 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:42:18,184 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [283323267] [2022-04-15 17:42:18,184 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [283323267] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:18,184 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:18,184 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-15 17:42:18,185 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:42:18,185 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1531002135] [2022-04-15 17:42:18,185 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1531002135] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:18,185 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:18,185 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-15 17:42:18,185 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [360099830] [2022-04-15 17:42:18,185 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:42:18,185 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 60 [2022-04-15 17:42:18,185 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:42:18,186 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-15 17:42:18,218 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:18,218 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-15 17:42:18,218 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:18,218 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-15 17:42:18,218 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-04-15 17:42:18,218 INFO L87 Difference]: Start difference. First operand 211 states and 272 transitions. Second operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-15 17:42:19,376 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:19,377 INFO L93 Difference]: Finished difference Result 250 states and 313 transitions. [2022-04-15 17:42:19,377 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-15 17:42:19,377 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 60 [2022-04-15 17:42:19,377 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:42:19,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-15 17:42:19,379 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 283 transitions. [2022-04-15 17:42:19,379 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-15 17:42:19,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 283 transitions. [2022-04-15 17:42:19,380 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 283 transitions. [2022-04-15 17:42:19,618 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 283 edges. 283 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:19,633 INFO L225 Difference]: With dead ends: 250 [2022-04-15 17:42:19,634 INFO L226 Difference]: Without dead ends: 210 [2022-04-15 17:42:19,634 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-04-15 17:42:19,634 INFO L913 BasicCegarLoop]: 213 mSDtfsCounter, 238 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 238 SdHoareTripleChecker+Valid, 401 SdHoareTripleChecker+Invalid, 314 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-15 17:42:19,634 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [238 Valid, 401 Invalid, 314 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 265 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-15 17:42:19,635 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-04-15 17:42:19,959 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 210. [2022-04-15 17:42:19,959 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:42:19,960 INFO L82 GeneralOperation]: Start isEquivalent. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-15 17:42:19,960 INFO L74 IsIncluded]: Start isIncluded. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-15 17:42:19,960 INFO L87 Difference]: Start difference. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-15 17:42:19,963 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:19,963 INFO L93 Difference]: Finished difference Result 210 states and 267 transitions. [2022-04-15 17:42:19,963 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-15 17:42:19,963 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:19,963 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:19,964 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 210 states. [2022-04-15 17:42:19,964 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 210 states. [2022-04-15 17:42:19,967 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:19,967 INFO L93 Difference]: Finished difference Result 210 states and 267 transitions. [2022-04-15 17:42:19,967 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-15 17:42:19,967 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:19,967 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:19,967 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:42:19,967 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:42:19,967 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-15 17:42:19,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 267 transitions. [2022-04-15 17:42:19,971 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 267 transitions. Word has length 60 [2022-04-15 17:42:19,971 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:42:19,971 INFO L478 AbstractCegarLoop]: Abstraction has 210 states and 267 transitions. [2022-04-15 17:42:19,971 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-15 17:42:19,971 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 267 transitions. [2022-04-15 17:42:20,280 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 267 edges. 267 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:20,281 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-15 17:42:20,281 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-04-15 17:42:20,281 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:42:20,281 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:42:20,282 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-04-15 17:42:20,282 INFO L403 AbstractCegarLoop]: === Iteration 18 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:42:20,282 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:42:20,282 INFO L85 PathProgramCache]: Analyzing trace with hash -1986597587, now seen corresponding path program 1 times [2022-04-15 17:42:20,282 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:20,282 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1476743353] [2022-04-15 17:42:20,282 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:42:20,282 INFO L85 PathProgramCache]: Analyzing trace with hash -1986597587, now seen corresponding path program 2 times [2022-04-15 17:42:20,282 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:42:20,282 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [930641361] [2022-04-15 17:42:20,283 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:42:20,283 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:42:20,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:20,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:42:20,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:20,367 INFO L290 TraceCheckUtils]: 0: Hoare triple {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-15 17:42:20,368 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-15 17:42:20,368 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #783#return; {29918#true} is VALID [2022-04-15 17:42:20,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:42:20,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:20,388 INFO L290 TraceCheckUtils]: 0: Hoare triple {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-15 17:42:20,388 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-15 17:42:20,388 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #715#return; {29918#true} is VALID [2022-04-15 17:42:20,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:42:20,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:20,400 INFO L290 TraceCheckUtils]: 0: Hoare triple {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-15 17:42:20,400 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-15 17:42:20,400 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #717#return; {29918#true} is VALID [2022-04-15 17:42:20,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-15 17:42:20,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:20,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-15 17:42:20,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:20,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-15 17:42:20,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:20,489 INFO L290 TraceCheckUtils]: 0: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-15 17:42:20,489 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-15 17:42:20,489 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-15 17:42:20,489 INFO L290 TraceCheckUtils]: 3: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-15 17:42:20,489 INFO L290 TraceCheckUtils]: 4: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-15 17:42:20,490 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-15 17:42:20,490 INFO L290 TraceCheckUtils]: 6: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-15 17:42:20,490 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-15 17:42:20,490 INFO L290 TraceCheckUtils]: 8: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,491 INFO L290 TraceCheckUtils]: 9: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,491 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,491 INFO L290 TraceCheckUtils]: 0: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-15 17:42:20,492 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-15 17:42:20,492 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-15 17:42:20,492 INFO L272 TraceCheckUtils]: 3: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:20,492 INFO L290 TraceCheckUtils]: 4: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-15 17:42:20,492 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-15 17:42:20,492 INFO L290 TraceCheckUtils]: 6: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-15 17:42:20,493 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-15 17:42:20,493 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-15 17:42:20,493 INFO L290 TraceCheckUtils]: 9: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-15 17:42:20,493 INFO L290 TraceCheckUtils]: 10: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-15 17:42:20,493 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-15 17:42:20,493 INFO L290 TraceCheckUtils]: 12: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,494 INFO L290 TraceCheckUtils]: 13: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,494 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,495 INFO L290 TraceCheckUtils]: 15: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,495 INFO L290 TraceCheckUtils]: 16: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,496 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-15 17:42:20,496 INFO L290 TraceCheckUtils]: 0: Hoare triple {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {29918#true} is VALID [2022-04-15 17:42:20,496 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {29918#true} is VALID [2022-04-15 17:42:20,496 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} assume !(0 != ~devExt__UpperConnectData__ClassService~1); {29918#true} is VALID [2022-04-15 17:42:20,496 INFO L290 TraceCheckUtils]: 3: Hoare triple {29918#true} assume !(~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 < ~sizeof__CONNECT_DATA~0);~connectData~0 := ~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0; {29918#true} is VALID [2022-04-15 17:42:20,496 INFO L290 TraceCheckUtils]: 4: Hoare triple {29918#true} assume !(~status~3 < 0); {29918#true} is VALID [2022-04-15 17:42:20,497 INFO L272 TraceCheckUtils]: 5: Hoare triple {29918#true} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:20,497 INFO L290 TraceCheckUtils]: 6: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-15 17:42:20,497 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-15 17:42:20,497 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-15 17:42:20,498 INFO L272 TraceCheckUtils]: 9: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:20,498 INFO L290 TraceCheckUtils]: 10: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-15 17:42:20,498 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-15 17:42:20,498 INFO L290 TraceCheckUtils]: 12: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-15 17:42:20,498 INFO L290 TraceCheckUtils]: 13: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-15 17:42:20,498 INFO L290 TraceCheckUtils]: 14: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-15 17:42:20,498 INFO L290 TraceCheckUtils]: 15: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-15 17:42:20,498 INFO L290 TraceCheckUtils]: 16: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-15 17:42:20,499 INFO L290 TraceCheckUtils]: 17: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-15 17:42:20,499 INFO L290 TraceCheckUtils]: 18: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,499 INFO L290 TraceCheckUtils]: 19: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,500 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,500 INFO L290 TraceCheckUtils]: 21: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,500 INFO L290 TraceCheckUtils]: 22: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,501 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-15 17:42:20,501 INFO L290 TraceCheckUtils]: 24: Hoare triple {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-15 17:42:20,501 INFO L290 TraceCheckUtils]: 25: Hoare triple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} assume true; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-15 17:42:20,502 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} {29918#true} #727#return; {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,503 INFO L272 TraceCheckUtils]: 0: Hoare triple {29918#true} call ULTIMATE.init(); {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:42:20,503 INFO L290 TraceCheckUtils]: 1: Hoare triple {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-15 17:42:20,503 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-15 17:42:20,503 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {29918#true} {29918#true} #783#return; {29918#true} is VALID [2022-04-15 17:42:20,503 INFO L272 TraceCheckUtils]: 4: Hoare triple {29918#true} call #t~ret81 := main(); {29918#true} is VALID [2022-04-15 17:42:20,503 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {29918#true} is VALID [2022-04-15 17:42:20,504 INFO L272 TraceCheckUtils]: 6: Hoare triple {29918#true} call _BLAST_init(); {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:20,504 INFO L290 TraceCheckUtils]: 7: Hoare triple {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-15 17:42:20,504 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-15 17:42:20,504 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {29918#true} {29918#true} #715#return; {29918#true} is VALID [2022-04-15 17:42:20,504 INFO L290 TraceCheckUtils]: 10: Hoare triple {29918#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-15 17:42:20,504 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume !(0 == ~irp_choice~0); {29918#true} is VALID [2022-04-15 17:42:20,505 INFO L272 TraceCheckUtils]: 12: Hoare triple {29918#true} call stub_driver_init(); {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:20,505 INFO L290 TraceCheckUtils]: 13: Hoare triple {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-15 17:42:20,505 INFO L290 TraceCheckUtils]: 14: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-15 17:42:20,505 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {29918#true} {29918#true} #717#return; {29918#true} is VALID [2022-04-15 17:42:20,505 INFO L290 TraceCheckUtils]: 16: Hoare triple {29918#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {29918#true} is VALID [2022-04-15 17:42:20,505 INFO L290 TraceCheckUtils]: 17: Hoare triple {29918#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {29918#true} is VALID [2022-04-15 17:42:20,505 INFO L290 TraceCheckUtils]: 18: Hoare triple {29918#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {29918#true} is VALID [2022-04-15 17:42:20,505 INFO L290 TraceCheckUtils]: 19: Hoare triple {29918#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {29918#true} is VALID [2022-04-15 17:42:20,505 INFO L290 TraceCheckUtils]: 20: Hoare triple {29918#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {29918#true} is VALID [2022-04-15 17:42:20,505 INFO L290 TraceCheckUtils]: 21: Hoare triple {29918#true} assume 8 == ~tmp_ndt_5~0; {29918#true} is VALID [2022-04-15 17:42:20,506 INFO L272 TraceCheckUtils]: 22: Hoare triple {29918#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:20,506 INFO L290 TraceCheckUtils]: 23: Hoare triple {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {29918#true} is VALID [2022-04-15 17:42:20,506 INFO L290 TraceCheckUtils]: 24: Hoare triple {29918#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {29918#true} is VALID [2022-04-15 17:42:20,506 INFO L290 TraceCheckUtils]: 25: Hoare triple {29918#true} assume !(0 != ~devExt__UpperConnectData__ClassService~1); {29918#true} is VALID [2022-04-15 17:42:20,506 INFO L290 TraceCheckUtils]: 26: Hoare triple {29918#true} assume !(~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 < ~sizeof__CONNECT_DATA~0);~connectData~0 := ~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0; {29918#true} is VALID [2022-04-15 17:42:20,506 INFO L290 TraceCheckUtils]: 27: Hoare triple {29918#true} assume !(~status~3 < 0); {29918#true} is VALID [2022-04-15 17:42:20,507 INFO L272 TraceCheckUtils]: 28: Hoare triple {29918#true} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:20,507 INFO L290 TraceCheckUtils]: 29: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-15 17:42:20,507 INFO L290 TraceCheckUtils]: 30: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-15 17:42:20,507 INFO L290 TraceCheckUtils]: 31: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-15 17:42:20,507 INFO L272 TraceCheckUtils]: 32: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:20,507 INFO L290 TraceCheckUtils]: 33: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-15 17:42:20,507 INFO L290 TraceCheckUtils]: 34: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-15 17:42:20,507 INFO L290 TraceCheckUtils]: 35: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-15 17:42:20,508 INFO L290 TraceCheckUtils]: 36: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-15 17:42:20,508 INFO L290 TraceCheckUtils]: 37: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-15 17:42:20,508 INFO L290 TraceCheckUtils]: 38: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-15 17:42:20,508 INFO L290 TraceCheckUtils]: 39: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-15 17:42:20,508 INFO L290 TraceCheckUtils]: 40: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-15 17:42:20,508 INFO L290 TraceCheckUtils]: 41: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,509 INFO L290 TraceCheckUtils]: 42: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,509 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,509 INFO L290 TraceCheckUtils]: 44: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,510 INFO L290 TraceCheckUtils]: 45: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,510 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-15 17:42:20,510 INFO L290 TraceCheckUtils]: 47: Hoare triple {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-15 17:42:20,511 INFO L290 TraceCheckUtils]: 48: Hoare triple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} assume true; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-15 17:42:20,511 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} {29918#true} #727#return; {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,511 INFO L290 TraceCheckUtils]: 50: Hoare triple {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,512 INFO L290 TraceCheckUtils]: 51: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,512 INFO L290 TraceCheckUtils]: 52: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,512 INFO L290 TraceCheckUtils]: 53: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,512 INFO L290 TraceCheckUtils]: 54: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,513 INFO L290 TraceCheckUtils]: 55: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,513 INFO L290 TraceCheckUtils]: 56: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,513 INFO L290 TraceCheckUtils]: 57: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:20,513 INFO L290 TraceCheckUtils]: 58: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {29919#false} is VALID [2022-04-15 17:42:20,513 INFO L272 TraceCheckUtils]: 59: Hoare triple {29919#false} call errorFn(); {29919#false} is VALID [2022-04-15 17:42:20,513 INFO L290 TraceCheckUtils]: 60: Hoare triple {29919#false} assume !false; {29919#false} is VALID [2022-04-15 17:42:20,514 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:42:20,514 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:42:20,514 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [930641361] [2022-04-15 17:42:20,514 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [930641361] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:20,514 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:20,514 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-15 17:42:20,514 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:42:20,514 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1476743353] [2022-04-15 17:42:20,514 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1476743353] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:20,514 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:20,514 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-15 17:42:20,514 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [621723126] [2022-04-15 17:42:20,514 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:42:20,515 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-04-15 17:42:20,515 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:42:20,515 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:20,548 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:20,548 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-15 17:42:20,548 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:20,549 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-15 17:42:20,549 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-04-15 17:42:20,549 INFO L87 Difference]: Start difference. First operand 210 states and 267 transitions. Second operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:23,698 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:23,698 INFO L93 Difference]: Finished difference Result 222 states and 279 transitions. [2022-04-15 17:42:23,698 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-15 17:42:23,699 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-04-15 17:42:23,699 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:42:23,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:23,700 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 249 transitions. [2022-04-15 17:42:23,717 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:23,718 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 249 transitions. [2022-04-15 17:42:23,718 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 249 transitions. [2022-04-15 17:42:23,981 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 249 edges. 249 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:23,984 INFO L225 Difference]: With dead ends: 222 [2022-04-15 17:42:23,984 INFO L226 Difference]: Without dead ends: 184 [2022-04-15 17:42:23,985 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-04-15 17:42:23,985 INFO L913 BasicCegarLoop]: 212 mSDtfsCounter, 456 mSDsluCounter, 767 mSDsCounter, 0 mSdLazyCounter, 1349 mSolverCounterSat, 90 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 456 SdHoareTripleChecker+Valid, 979 SdHoareTripleChecker+Invalid, 1439 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 90 IncrementalHoareTripleChecker+Valid, 1349 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-04-15 17:42:23,985 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [456 Valid, 979 Invalid, 1439 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [90 Valid, 1349 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-04-15 17:42:23,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2022-04-15 17:42:24,267 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 184. [2022-04-15 17:42:24,267 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:42:24,267 INFO L82 GeneralOperation]: Start isEquivalent. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-15 17:42:24,267 INFO L74 IsIncluded]: Start isIncluded. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-15 17:42:24,268 INFO L87 Difference]: Start difference. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-15 17:42:24,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:24,270 INFO L93 Difference]: Finished difference Result 184 states and 229 transitions. [2022-04-15 17:42:24,270 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-15 17:42:24,270 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:24,270 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:24,271 INFO L74 IsIncluded]: Start isIncluded. First operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) Second operand 184 states. [2022-04-15 17:42:24,271 INFO L87 Difference]: Start difference. First operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) Second operand 184 states. [2022-04-15 17:42:24,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:24,273 INFO L93 Difference]: Finished difference Result 184 states and 229 transitions. [2022-04-15 17:42:24,273 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-15 17:42:24,273 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:24,273 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:24,273 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:42:24,273 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:42:24,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-15 17:42:24,276 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 229 transitions. [2022-04-15 17:42:24,276 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 229 transitions. Word has length 61 [2022-04-15 17:42:24,276 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:42:24,276 INFO L478 AbstractCegarLoop]: Abstraction has 184 states and 229 transitions. [2022-04-15 17:42:24,276 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:24,276 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 184 states and 229 transitions. [2022-04-15 17:42:24,553 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 229 edges. 229 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:24,554 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-15 17:42:24,554 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-04-15 17:42:24,554 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:42:24,554 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:42:24,554 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-04-15 17:42:24,555 INFO L403 AbstractCegarLoop]: === Iteration 19 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:42:24,555 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:42:24,555 INFO L85 PathProgramCache]: Analyzing trace with hash -2132592656, now seen corresponding path program 1 times [2022-04-15 17:42:24,555 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:24,555 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [839985726] [2022-04-15 17:42:24,555 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:42:24,555 INFO L85 PathProgramCache]: Analyzing trace with hash -2132592656, now seen corresponding path program 2 times [2022-04-15 17:42:24,555 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:42:24,555 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1001673518] [2022-04-15 17:42:24,555 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:42:24,555 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:42:24,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:24,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:42:24,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:24,611 INFO L290 TraceCheckUtils]: 0: Hoare triple {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-15 17:42:24,612 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-15 17:42:24,612 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #783#return; {31182#true} is VALID [2022-04-15 17:42:24,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:42:24,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:24,638 INFO L290 TraceCheckUtils]: 0: Hoare triple {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-15 17:42:24,639 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-15 17:42:24,639 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #715#return; {31182#true} is VALID [2022-04-15 17:42:24,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:42:24,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:24,652 INFO L290 TraceCheckUtils]: 0: Hoare triple {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-15 17:42:24,652 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-15 17:42:24,652 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #717#return; {31182#true} is VALID [2022-04-15 17:42:24,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-04-15 17:42:24,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:24,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-15 17:42:24,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:24,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-15 17:42:24,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:24,738 INFO L290 TraceCheckUtils]: 0: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-15 17:42:24,738 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-15 17:42:24,738 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-15 17:42:24,738 INFO L290 TraceCheckUtils]: 3: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-15 17:42:24,738 INFO L290 TraceCheckUtils]: 4: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-15 17:42:24,751 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-15 17:42:24,751 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-15 17:42:24,752 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-15 17:42:24,752 INFO L290 TraceCheckUtils]: 8: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,752 INFO L290 TraceCheckUtils]: 9: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,753 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,753 INFO L290 TraceCheckUtils]: 0: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-15 17:42:24,753 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-15 17:42:24,753 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-15 17:42:24,754 INFO L272 TraceCheckUtils]: 3: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:24,754 INFO L290 TraceCheckUtils]: 4: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-15 17:42:24,754 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-15 17:42:24,754 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-15 17:42:24,754 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-15 17:42:24,754 INFO L290 TraceCheckUtils]: 8: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-15 17:42:24,754 INFO L290 TraceCheckUtils]: 9: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-15 17:42:24,754 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-15 17:42:24,755 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-15 17:42:24,755 INFO L290 TraceCheckUtils]: 12: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,755 INFO L290 TraceCheckUtils]: 13: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,756 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,756 INFO L290 TraceCheckUtils]: 15: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,756 INFO L290 TraceCheckUtils]: 16: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,757 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-15 17:42:24,757 INFO L290 TraceCheckUtils]: 0: Hoare triple {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {31182#true} is VALID [2022-04-15 17:42:24,757 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume 0 == ~irpStack__MajorFunction~0; {31182#true} is VALID [2022-04-15 17:42:24,757 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {31182#true} is VALID [2022-04-15 17:42:24,757 INFO L290 TraceCheckUtils]: 3: Hoare triple {31182#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {31182#true} is VALID [2022-04-15 17:42:24,758 INFO L272 TraceCheckUtils]: 4: Hoare triple {31182#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:24,758 INFO L290 TraceCheckUtils]: 5: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-15 17:42:24,758 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-15 17:42:24,758 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-15 17:42:24,759 INFO L272 TraceCheckUtils]: 8: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:24,759 INFO L290 TraceCheckUtils]: 9: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-15 17:42:24,759 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-15 17:42:24,759 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-15 17:42:24,759 INFO L290 TraceCheckUtils]: 12: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-15 17:42:24,759 INFO L290 TraceCheckUtils]: 13: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-15 17:42:24,759 INFO L290 TraceCheckUtils]: 14: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-15 17:42:24,759 INFO L290 TraceCheckUtils]: 15: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-15 17:42:24,759 INFO L290 TraceCheckUtils]: 16: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-15 17:42:24,760 INFO L290 TraceCheckUtils]: 17: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,760 INFO L290 TraceCheckUtils]: 18: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,760 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,761 INFO L290 TraceCheckUtils]: 20: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,761 INFO L290 TraceCheckUtils]: 21: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,761 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-15 17:42:24,762 INFO L290 TraceCheckUtils]: 23: Hoare triple {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~tmp~0 := #t~ret43;havoc #t~ret43;#res := ~tmp~0; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-15 17:42:24,762 INFO L290 TraceCheckUtils]: 24: Hoare triple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} assume true; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-15 17:42:24,763 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} {31182#true} #719#return; {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,764 INFO L272 TraceCheckUtils]: 0: Hoare triple {31182#true} call ULTIMATE.init(); {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:42:24,764 INFO L290 TraceCheckUtils]: 1: Hoare triple {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-15 17:42:24,764 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-15 17:42:24,764 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {31182#true} {31182#true} #783#return; {31182#true} is VALID [2022-04-15 17:42:24,764 INFO L272 TraceCheckUtils]: 4: Hoare triple {31182#true} call #t~ret81 := main(); {31182#true} is VALID [2022-04-15 17:42:24,764 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {31182#true} is VALID [2022-04-15 17:42:24,765 INFO L272 TraceCheckUtils]: 6: Hoare triple {31182#true} call _BLAST_init(); {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:24,765 INFO L290 TraceCheckUtils]: 7: Hoare triple {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-15 17:42:24,765 INFO L290 TraceCheckUtils]: 8: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-15 17:42:24,765 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {31182#true} {31182#true} #715#return; {31182#true} is VALID [2022-04-15 17:42:24,765 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-15 17:42:24,765 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} assume !(0 == ~irp_choice~0); {31182#true} is VALID [2022-04-15 17:42:24,766 INFO L272 TraceCheckUtils]: 12: Hoare triple {31182#true} call stub_driver_init(); {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:24,766 INFO L290 TraceCheckUtils]: 13: Hoare triple {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-15 17:42:24,766 INFO L290 TraceCheckUtils]: 14: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-15 17:42:24,766 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {31182#true} {31182#true} #717#return; {31182#true} is VALID [2022-04-15 17:42:24,766 INFO L290 TraceCheckUtils]: 16: Hoare triple {31182#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {31182#true} is VALID [2022-04-15 17:42:24,766 INFO L290 TraceCheckUtils]: 17: Hoare triple {31182#true} assume 0 == ~tmp_ndt_1~0; {31182#true} is VALID [2022-04-15 17:42:24,767 INFO L272 TraceCheckUtils]: 18: Hoare triple {31182#true} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:24,767 INFO L290 TraceCheckUtils]: 19: Hoare triple {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {31182#true} is VALID [2022-04-15 17:42:24,767 INFO L290 TraceCheckUtils]: 20: Hoare triple {31182#true} assume 0 == ~irpStack__MajorFunction~0; {31182#true} is VALID [2022-04-15 17:42:24,767 INFO L290 TraceCheckUtils]: 21: Hoare triple {31182#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {31182#true} is VALID [2022-04-15 17:42:24,767 INFO L290 TraceCheckUtils]: 22: Hoare triple {31182#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {31182#true} is VALID [2022-04-15 17:42:24,768 INFO L272 TraceCheckUtils]: 23: Hoare triple {31182#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:24,768 INFO L290 TraceCheckUtils]: 24: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-15 17:42:24,768 INFO L290 TraceCheckUtils]: 25: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-15 17:42:24,768 INFO L290 TraceCheckUtils]: 26: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-15 17:42:24,768 INFO L272 TraceCheckUtils]: 27: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:24,768 INFO L290 TraceCheckUtils]: 28: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-15 17:42:24,768 INFO L290 TraceCheckUtils]: 29: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-15 17:42:24,769 INFO L290 TraceCheckUtils]: 30: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-15 17:42:24,769 INFO L290 TraceCheckUtils]: 31: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-15 17:42:24,769 INFO L290 TraceCheckUtils]: 32: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-15 17:42:24,769 INFO L290 TraceCheckUtils]: 33: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-15 17:42:24,769 INFO L290 TraceCheckUtils]: 34: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-15 17:42:24,769 INFO L290 TraceCheckUtils]: 35: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-15 17:42:24,769 INFO L290 TraceCheckUtils]: 36: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,770 INFO L290 TraceCheckUtils]: 37: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,770 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,771 INFO L290 TraceCheckUtils]: 39: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,771 INFO L290 TraceCheckUtils]: 40: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,771 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-15 17:42:24,772 INFO L290 TraceCheckUtils]: 42: Hoare triple {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~tmp~0 := #t~ret43;havoc #t~ret43;#res := ~tmp~0; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-15 17:42:24,772 INFO L290 TraceCheckUtils]: 43: Hoare triple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} assume true; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-15 17:42:24,773 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} {31182#true} #719#return; {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,773 INFO L290 TraceCheckUtils]: 45: Hoare triple {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret29 && #t~ret29 <= 2147483647;~status~1 := #t~ret29;havoc #t~ret29; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,773 INFO L290 TraceCheckUtils]: 46: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,774 INFO L290 TraceCheckUtils]: 47: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,774 INFO L290 TraceCheckUtils]: 48: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,774 INFO L290 TraceCheckUtils]: 49: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,774 INFO L290 TraceCheckUtils]: 50: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,775 INFO L290 TraceCheckUtils]: 51: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,775 INFO L290 TraceCheckUtils]: 52: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:24,775 INFO L290 TraceCheckUtils]: 53: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {31183#false} is VALID [2022-04-15 17:42:24,775 INFO L272 TraceCheckUtils]: 54: Hoare triple {31183#false} call errorFn(); {31183#false} is VALID [2022-04-15 17:42:24,775 INFO L290 TraceCheckUtils]: 55: Hoare triple {31183#false} assume !false; {31183#false} is VALID [2022-04-15 17:42:24,776 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:42:24,776 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:42:24,776 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1001673518] [2022-04-15 17:42:24,776 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1001673518] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:24,776 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:24,776 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-15 17:42:24,776 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:42:24,777 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [839985726] [2022-04-15 17:42:24,777 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [839985726] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:24,777 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:24,777 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-15 17:42:24,777 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [235068787] [2022-04-15 17:42:24,777 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:42:24,777 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 56 [2022-04-15 17:42:24,778 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:42:24,778 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:24,823 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:24,823 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-15 17:42:24,823 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:24,824 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-15 17:42:24,824 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-04-15 17:42:24,824 INFO L87 Difference]: Start difference. First operand 184 states and 229 transitions. Second operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:27,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:27,444 INFO L93 Difference]: Finished difference Result 196 states and 241 transitions. [2022-04-15 17:42:27,444 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-15 17:42:27,444 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 56 [2022-04-15 17:42:27,444 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:42:27,444 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:27,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 211 transitions. [2022-04-15 17:42:27,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:27,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 211 transitions. [2022-04-15 17:42:27,446 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 211 transitions. [2022-04-15 17:42:27,622 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 211 edges. 211 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:27,624 INFO L225 Difference]: With dead ends: 196 [2022-04-15 17:42:27,624 INFO L226 Difference]: Without dead ends: 182 [2022-04-15 17:42:27,624 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-04-15 17:42:27,625 INFO L913 BasicCegarLoop]: 165 mSDtfsCounter, 343 mSDsluCounter, 626 mSDsCounter, 0 mSdLazyCounter, 1181 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 343 SdHoareTripleChecker+Valid, 791 SdHoareTripleChecker+Invalid, 1262 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 1181 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-04-15 17:42:27,625 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [343 Valid, 791 Invalid, 1262 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 1181 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-04-15 17:42:27,626 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2022-04-15 17:42:27,910 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 182. [2022-04-15 17:42:27,911 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:42:27,911 INFO L82 GeneralOperation]: Start isEquivalent. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-15 17:42:27,911 INFO L74 IsIncluded]: Start isIncluded. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-15 17:42:27,911 INFO L87 Difference]: Start difference. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-15 17:42:27,913 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:27,914 INFO L93 Difference]: Finished difference Result 182 states and 225 transitions. [2022-04-15 17:42:27,914 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-15 17:42:27,914 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:27,914 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:27,914 INFO L74 IsIncluded]: Start isIncluded. First operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) Second operand 182 states. [2022-04-15 17:42:27,914 INFO L87 Difference]: Start difference. First operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) Second operand 182 states. [2022-04-15 17:42:27,916 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:27,916 INFO L93 Difference]: Finished difference Result 182 states and 225 transitions. [2022-04-15 17:42:27,916 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-15 17:42:27,916 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:27,917 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:27,917 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:42:27,917 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:42:27,917 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-15 17:42:27,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 225 transitions. [2022-04-15 17:42:27,919 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 225 transitions. Word has length 56 [2022-04-15 17:42:27,919 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:42:27,919 INFO L478 AbstractCegarLoop]: Abstraction has 182 states and 225 transitions. [2022-04-15 17:42:27,919 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:27,919 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 182 states and 225 transitions. [2022-04-15 17:42:28,202 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 225 edges. 225 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:28,202 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-15 17:42:28,203 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-04-15 17:42:28,203 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:42:28,203 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:42:28,203 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-04-15 17:42:28,203 INFO L403 AbstractCegarLoop]: === Iteration 20 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:42:28,203 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:42:28,203 INFO L85 PathProgramCache]: Analyzing trace with hash 1221590652, now seen corresponding path program 1 times [2022-04-15 17:42:28,203 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:28,203 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1279902610] [2022-04-15 17:42:28,204 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:42:28,204 INFO L85 PathProgramCache]: Analyzing trace with hash 1221590652, now seen corresponding path program 2 times [2022-04-15 17:42:28,204 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:42:28,204 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [935412808] [2022-04-15 17:42:28,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:42:28,204 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:42:28,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:28,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:42:28,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:28,298 INFO L290 TraceCheckUtils]: 0: Hoare triple {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-15 17:42:28,298 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-15 17:42:28,298 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #783#return; {32385#true} is VALID [2022-04-15 17:42:28,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:42:28,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:28,323 INFO L290 TraceCheckUtils]: 0: Hoare triple {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-15 17:42:28,324 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-15 17:42:28,324 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #715#return; {32385#true} is VALID [2022-04-15 17:42:28,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:42:28,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:28,338 INFO L290 TraceCheckUtils]: 0: Hoare triple {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-15 17:42:28,338 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-15 17:42:28,339 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #717#return; {32385#true} is VALID [2022-04-15 17:42:28,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-15 17:42:28,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:28,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-04-15 17:42:28,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:28,427 INFO L290 TraceCheckUtils]: 0: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-15 17:42:28,428 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-15 17:42:28,428 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-15 17:42:28,428 INFO L290 TraceCheckUtils]: 3: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-15 17:42:28,428 INFO L290 TraceCheckUtils]: 4: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:28,429 INFO L290 TraceCheckUtils]: 5: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:28,429 INFO L290 TraceCheckUtils]: 6: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:28,429 INFO L290 TraceCheckUtils]: 7: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-15 17:42:28,430 INFO L290 TraceCheckUtils]: 8: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-15 17:42:28,430 INFO L290 TraceCheckUtils]: 9: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-15 17:42:28,431 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-15 17:42:28,431 INFO L290 TraceCheckUtils]: 0: Hoare triple {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {32385#true} is VALID [2022-04-15 17:42:28,431 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume !(0 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-15 17:42:28,431 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} assume !(23 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-15 17:42:28,431 INFO L290 TraceCheckUtils]: 3: Hoare triple {32385#true} assume 2 == ~irpStack__MinorFunction~0; {32385#true} is VALID [2022-04-15 17:42:28,431 INFO L290 TraceCheckUtils]: 4: Hoare triple {32385#true} ~devExt__Removed~0 := 1; {32385#true} is VALID [2022-04-15 17:42:28,431 INFO L290 TraceCheckUtils]: 5: Hoare triple {32385#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {32385#true} is VALID [2022-04-15 17:42:28,431 INFO L290 TraceCheckUtils]: 6: Hoare triple {32385#true} #t~post15 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post15;havoc #t~post15;#t~post16 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post16;havoc #t~post16; {32385#true} is VALID [2022-04-15 17:42:28,432 INFO L272 TraceCheckUtils]: 7: Hoare triple {32385#true} call #t~ret17 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:28,432 INFO L290 TraceCheckUtils]: 8: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-15 17:42:28,432 INFO L290 TraceCheckUtils]: 9: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-15 17:42:28,432 INFO L290 TraceCheckUtils]: 10: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-15 17:42:28,432 INFO L290 TraceCheckUtils]: 11: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-15 17:42:28,433 INFO L290 TraceCheckUtils]: 12: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:28,433 INFO L290 TraceCheckUtils]: 13: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:28,433 INFO L290 TraceCheckUtils]: 14: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:28,434 INFO L290 TraceCheckUtils]: 15: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-15 17:42:28,434 INFO L290 TraceCheckUtils]: 16: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-15 17:42:28,434 INFO L290 TraceCheckUtils]: 17: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-15 17:42:28,435 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-15 17:42:28,435 INFO L290 TraceCheckUtils]: 19: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume -2147483648 <= #t~ret17 && #t~ret17 <= 2147483647;havoc #t~ret17;~status~0 := 0; {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,435 INFO L290 TraceCheckUtils]: 20: Hoare triple {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,436 INFO L290 TraceCheckUtils]: 21: Hoare triple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,436 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {32385#true} #723#return; {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,438 INFO L272 TraceCheckUtils]: 0: Hoare triple {32385#true} call ULTIMATE.init(); {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:42:28,438 INFO L290 TraceCheckUtils]: 1: Hoare triple {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-15 17:42:28,438 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-15 17:42:28,438 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {32385#true} {32385#true} #783#return; {32385#true} is VALID [2022-04-15 17:42:28,438 INFO L272 TraceCheckUtils]: 4: Hoare triple {32385#true} call #t~ret81 := main(); {32385#true} is VALID [2022-04-15 17:42:28,438 INFO L290 TraceCheckUtils]: 5: Hoare triple {32385#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {32385#true} is VALID [2022-04-15 17:42:28,439 INFO L272 TraceCheckUtils]: 6: Hoare triple {32385#true} call _BLAST_init(); {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:28,439 INFO L290 TraceCheckUtils]: 7: Hoare triple {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-15 17:42:28,439 INFO L290 TraceCheckUtils]: 8: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-15 17:42:28,439 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {32385#true} {32385#true} #715#return; {32385#true} is VALID [2022-04-15 17:42:28,439 INFO L290 TraceCheckUtils]: 10: Hoare triple {32385#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-15 17:42:28,439 INFO L290 TraceCheckUtils]: 11: Hoare triple {32385#true} assume !(0 == ~irp_choice~0); {32385#true} is VALID [2022-04-15 17:42:28,440 INFO L272 TraceCheckUtils]: 12: Hoare triple {32385#true} call stub_driver_init(); {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:28,440 INFO L290 TraceCheckUtils]: 13: Hoare triple {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-15 17:42:28,440 INFO L290 TraceCheckUtils]: 14: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-15 17:42:28,440 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {32385#true} {32385#true} #717#return; {32385#true} is VALID [2022-04-15 17:42:28,440 INFO L290 TraceCheckUtils]: 16: Hoare triple {32385#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {32385#true} is VALID [2022-04-15 17:42:28,440 INFO L290 TraceCheckUtils]: 17: Hoare triple {32385#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {32385#true} is VALID [2022-04-15 17:42:28,440 INFO L290 TraceCheckUtils]: 18: Hoare triple {32385#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {32385#true} is VALID [2022-04-15 17:42:28,440 INFO L290 TraceCheckUtils]: 19: Hoare triple {32385#true} assume 3 == ~tmp_ndt_3~0; {32385#true} is VALID [2022-04-15 17:42:28,441 INFO L272 TraceCheckUtils]: 20: Hoare triple {32385#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:28,441 INFO L290 TraceCheckUtils]: 21: Hoare triple {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {32385#true} is VALID [2022-04-15 17:42:28,441 INFO L290 TraceCheckUtils]: 22: Hoare triple {32385#true} assume !(0 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-15 17:42:28,441 INFO L290 TraceCheckUtils]: 23: Hoare triple {32385#true} assume !(23 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-15 17:42:28,441 INFO L290 TraceCheckUtils]: 24: Hoare triple {32385#true} assume 2 == ~irpStack__MinorFunction~0; {32385#true} is VALID [2022-04-15 17:42:28,441 INFO L290 TraceCheckUtils]: 25: Hoare triple {32385#true} ~devExt__Removed~0 := 1; {32385#true} is VALID [2022-04-15 17:42:28,441 INFO L290 TraceCheckUtils]: 26: Hoare triple {32385#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {32385#true} is VALID [2022-04-15 17:42:28,442 INFO L290 TraceCheckUtils]: 27: Hoare triple {32385#true} #t~post15 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post15;havoc #t~post15;#t~post16 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post16;havoc #t~post16; {32385#true} is VALID [2022-04-15 17:42:28,442 INFO L272 TraceCheckUtils]: 28: Hoare triple {32385#true} call #t~ret17 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:28,442 INFO L290 TraceCheckUtils]: 29: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-15 17:42:28,442 INFO L290 TraceCheckUtils]: 30: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-15 17:42:28,442 INFO L290 TraceCheckUtils]: 31: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-15 17:42:28,442 INFO L290 TraceCheckUtils]: 32: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-15 17:42:28,443 INFO L290 TraceCheckUtils]: 33: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:28,443 INFO L290 TraceCheckUtils]: 34: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:28,443 INFO L290 TraceCheckUtils]: 35: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-15 17:42:28,444 INFO L290 TraceCheckUtils]: 36: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-15 17:42:28,444 INFO L290 TraceCheckUtils]: 37: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-15 17:42:28,444 INFO L290 TraceCheckUtils]: 38: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-15 17:42:28,445 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-15 17:42:28,445 INFO L290 TraceCheckUtils]: 40: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume -2147483648 <= #t~ret17 && #t~ret17 <= 2147483647;havoc #t~ret17;~status~0 := 0; {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,446 INFO L290 TraceCheckUtils]: 41: Hoare triple {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,446 INFO L290 TraceCheckUtils]: 42: Hoare triple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,447 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {32385#true} #723#return; {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,447 INFO L290 TraceCheckUtils]: 44: Hoare triple {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,447 INFO L290 TraceCheckUtils]: 45: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,447 INFO L290 TraceCheckUtils]: 46: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,448 INFO L290 TraceCheckUtils]: 47: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,448 INFO L290 TraceCheckUtils]: 48: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,448 INFO L290 TraceCheckUtils]: 49: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,449 INFO L290 TraceCheckUtils]: 50: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,449 INFO L290 TraceCheckUtils]: 51: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:28,449 INFO L290 TraceCheckUtils]: 52: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {32386#false} is VALID [2022-04-15 17:42:28,449 INFO L272 TraceCheckUtils]: 53: Hoare triple {32386#false} call errorFn(); {32386#false} is VALID [2022-04-15 17:42:28,449 INFO L290 TraceCheckUtils]: 54: Hoare triple {32386#false} assume !false; {32386#false} is VALID [2022-04-15 17:42:28,450 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:42:28,450 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:42:28,450 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [935412808] [2022-04-15 17:42:28,450 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [935412808] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:28,450 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:28,450 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-15 17:42:28,450 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:42:28,450 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1279902610] [2022-04-15 17:42:28,450 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1279902610] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:28,450 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:28,450 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-15 17:42:28,450 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [633860064] [2022-04-15 17:42:28,450 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:42:28,451 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-15 17:42:28,451 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:42:28,451 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:28,489 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:28,490 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-04-15 17:42:28,490 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:28,490 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-04-15 17:42:28,490 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2022-04-15 17:42:28,490 INFO L87 Difference]: Start difference. First operand 182 states and 225 transitions. Second operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:31,045 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:31,046 INFO L93 Difference]: Finished difference Result 235 states and 281 transitions. [2022-04-15 17:42:31,046 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-15 17:42:31,046 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-15 17:42:31,046 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:42:31,046 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:31,048 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 256 transitions. [2022-04-15 17:42:31,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:31,050 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 256 transitions. [2022-04-15 17:42:31,050 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 256 transitions. [2022-04-15 17:42:31,263 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 256 edges. 256 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:31,269 INFO L225 Difference]: With dead ends: 235 [2022-04-15 17:42:31,269 INFO L226 Difference]: Without dead ends: 218 [2022-04-15 17:42:31,269 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=101, Invalid=405, Unknown=0, NotChecked=0, Total=506 [2022-04-15 17:42:31,269 INFO L913 BasicCegarLoop]: 169 mSDtfsCounter, 565 mSDsluCounter, 430 mSDsCounter, 0 mSdLazyCounter, 892 mSolverCounterSat, 125 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 565 SdHoareTripleChecker+Valid, 599 SdHoareTripleChecker+Invalid, 1017 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 125 IncrementalHoareTripleChecker+Valid, 892 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-15 17:42:31,270 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [565 Valid, 599 Invalid, 1017 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [125 Valid, 892 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-15 17:42:31,270 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 218 states. [2022-04-15 17:42:31,585 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 218 to 188. [2022-04-15 17:42:31,585 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:42:31,586 INFO L82 GeneralOperation]: Start isEquivalent. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-15 17:42:31,586 INFO L74 IsIncluded]: Start isIncluded. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-15 17:42:31,599 INFO L87 Difference]: Start difference. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-15 17:42:31,602 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:31,602 INFO L93 Difference]: Finished difference Result 218 states and 263 transitions. [2022-04-15 17:42:31,602 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 263 transitions. [2022-04-15 17:42:31,603 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:31,603 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:31,603 INFO L74 IsIncluded]: Start isIncluded. First operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) Second operand 218 states. [2022-04-15 17:42:31,603 INFO L87 Difference]: Start difference. First operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) Second operand 218 states. [2022-04-15 17:42:31,606 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:31,606 INFO L93 Difference]: Finished difference Result 218 states and 263 transitions. [2022-04-15 17:42:31,606 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 263 transitions. [2022-04-15 17:42:31,606 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:31,606 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:31,606 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:42:31,606 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:42:31,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-15 17:42:31,609 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 232 transitions. [2022-04-15 17:42:31,609 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 232 transitions. Word has length 55 [2022-04-15 17:42:31,609 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:42:31,609 INFO L478 AbstractCegarLoop]: Abstraction has 188 states and 232 transitions. [2022-04-15 17:42:31,609 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:31,612 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 188 states and 232 transitions. [2022-04-15 17:42:31,896 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 232 edges. 232 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:31,897 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 232 transitions. [2022-04-15 17:42:31,897 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-04-15 17:42:31,897 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:42:31,897 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:42:31,897 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-04-15 17:42:31,897 INFO L403 AbstractCegarLoop]: === Iteration 21 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:42:31,898 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:42:31,898 INFO L85 PathProgramCache]: Analyzing trace with hash 2050869943, now seen corresponding path program 1 times [2022-04-15 17:42:31,898 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:31,898 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [652334004] [2022-04-15 17:42:31,898 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:42:31,898 INFO L85 PathProgramCache]: Analyzing trace with hash 2050869943, now seen corresponding path program 2 times [2022-04-15 17:42:31,898 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:42:31,898 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1247095816] [2022-04-15 17:42:31,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:42:31,898 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:42:31,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:31,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:42:31,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:31,966 INFO L290 TraceCheckUtils]: 0: Hoare triple {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-15 17:42:31,966 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-15 17:42:31,966 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #783#return; {33749#true} is VALID [2022-04-15 17:42:31,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:42:31,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:31,988 INFO L290 TraceCheckUtils]: 0: Hoare triple {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-15 17:42:31,988 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-15 17:42:31,988 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #715#return; {33749#true} is VALID [2022-04-15 17:42:32,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:42:32,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:32,207 INFO L290 TraceCheckUtils]: 0: Hoare triple {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-15 17:42:32,207 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-15 17:42:32,207 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #717#return; {33749#true} is VALID [2022-04-15 17:42:32,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-15 17:42:32,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:32,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-04-15 17:42:32,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:32,328 INFO L290 TraceCheckUtils]: 0: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-15 17:42:32,329 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-15 17:42:32,329 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-15 17:42:32,329 INFO L290 TraceCheckUtils]: 3: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-15 17:42:32,329 INFO L290 TraceCheckUtils]: 4: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-15 17:42:32,329 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-15 17:42:32,329 INFO L290 TraceCheckUtils]: 6: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-15 17:42:32,329 INFO L290 TraceCheckUtils]: 7: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-15 17:42:32,329 INFO L290 TraceCheckUtils]: 8: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,330 INFO L290 TraceCheckUtils]: 9: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,330 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,331 INFO L290 TraceCheckUtils]: 0: Hoare triple {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {33749#true} is VALID [2022-04-15 17:42:32,331 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume !(0 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-15 17:42:32,331 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} assume !(23 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-15 17:42:32,331 INFO L290 TraceCheckUtils]: 3: Hoare triple {33749#true} assume !(2 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-15 17:42:32,331 INFO L290 TraceCheckUtils]: 4: Hoare triple {33749#true} assume 1 == ~irpStack__MinorFunction~0; {33749#true} is VALID [2022-04-15 17:42:32,331 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {33749#true} is VALID [2022-04-15 17:42:32,331 INFO L290 TraceCheckUtils]: 6: Hoare triple {33749#true} #t~post18 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post18;havoc #t~post18;#t~post19 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post19;havoc #t~post19; {33749#true} is VALID [2022-04-15 17:42:32,332 INFO L272 TraceCheckUtils]: 7: Hoare triple {33749#true} call #t~ret20 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:32,332 INFO L290 TraceCheckUtils]: 8: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-15 17:42:32,332 INFO L290 TraceCheckUtils]: 9: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-15 17:42:32,332 INFO L290 TraceCheckUtils]: 10: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-15 17:42:32,332 INFO L290 TraceCheckUtils]: 11: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-15 17:42:32,332 INFO L290 TraceCheckUtils]: 12: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-15 17:42:32,332 INFO L290 TraceCheckUtils]: 13: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-15 17:42:32,332 INFO L290 TraceCheckUtils]: 14: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-15 17:42:32,332 INFO L290 TraceCheckUtils]: 15: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-15 17:42:32,333 INFO L290 TraceCheckUtils]: 16: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,333 INFO L290 TraceCheckUtils]: 17: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,333 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,334 INFO L290 TraceCheckUtils]: 19: Hoare triple {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret20 && #t~ret20 <= 2147483647;~status~0 := #t~ret20;havoc #t~ret20; {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,334 INFO L290 TraceCheckUtils]: 20: Hoare triple {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,334 INFO L290 TraceCheckUtils]: 21: Hoare triple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,335 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {33749#true} #723#return; {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,336 INFO L272 TraceCheckUtils]: 0: Hoare triple {33749#true} call ULTIMATE.init(); {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:42:32,337 INFO L290 TraceCheckUtils]: 1: Hoare triple {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-15 17:42:32,337 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-15 17:42:32,337 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {33749#true} {33749#true} #783#return; {33749#true} is VALID [2022-04-15 17:42:32,337 INFO L272 TraceCheckUtils]: 4: Hoare triple {33749#true} call #t~ret81 := main(); {33749#true} is VALID [2022-04-15 17:42:32,337 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {33749#true} is VALID [2022-04-15 17:42:32,338 INFO L272 TraceCheckUtils]: 6: Hoare triple {33749#true} call _BLAST_init(); {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:32,338 INFO L290 TraceCheckUtils]: 7: Hoare triple {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-15 17:42:32,338 INFO L290 TraceCheckUtils]: 8: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-15 17:42:32,338 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {33749#true} {33749#true} #715#return; {33749#true} is VALID [2022-04-15 17:42:32,338 INFO L290 TraceCheckUtils]: 10: Hoare triple {33749#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-15 17:42:32,338 INFO L290 TraceCheckUtils]: 11: Hoare triple {33749#true} assume !(0 == ~irp_choice~0); {33749#true} is VALID [2022-04-15 17:42:32,339 INFO L272 TraceCheckUtils]: 12: Hoare triple {33749#true} call stub_driver_init(); {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:32,340 INFO L290 TraceCheckUtils]: 13: Hoare triple {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-15 17:42:32,340 INFO L290 TraceCheckUtils]: 14: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-15 17:42:32,340 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {33749#true} {33749#true} #717#return; {33749#true} is VALID [2022-04-15 17:42:32,340 INFO L290 TraceCheckUtils]: 16: Hoare triple {33749#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {33749#true} is VALID [2022-04-15 17:42:32,340 INFO L290 TraceCheckUtils]: 17: Hoare triple {33749#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {33749#true} is VALID [2022-04-15 17:42:32,340 INFO L290 TraceCheckUtils]: 18: Hoare triple {33749#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {33749#true} is VALID [2022-04-15 17:42:32,340 INFO L290 TraceCheckUtils]: 19: Hoare triple {33749#true} assume 3 == ~tmp_ndt_3~0; {33749#true} is VALID [2022-04-15 17:42:32,341 INFO L272 TraceCheckUtils]: 20: Hoare triple {33749#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:32,341 INFO L290 TraceCheckUtils]: 21: Hoare triple {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {33749#true} is VALID [2022-04-15 17:42:32,341 INFO L290 TraceCheckUtils]: 22: Hoare triple {33749#true} assume !(0 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-15 17:42:32,341 INFO L290 TraceCheckUtils]: 23: Hoare triple {33749#true} assume !(23 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-15 17:42:32,341 INFO L290 TraceCheckUtils]: 24: Hoare triple {33749#true} assume !(2 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-15 17:42:32,341 INFO L290 TraceCheckUtils]: 25: Hoare triple {33749#true} assume 1 == ~irpStack__MinorFunction~0; {33749#true} is VALID [2022-04-15 17:42:32,341 INFO L290 TraceCheckUtils]: 26: Hoare triple {33749#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {33749#true} is VALID [2022-04-15 17:42:32,341 INFO L290 TraceCheckUtils]: 27: Hoare triple {33749#true} #t~post18 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post18;havoc #t~post18;#t~post19 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post19;havoc #t~post19; {33749#true} is VALID [2022-04-15 17:42:32,342 INFO L272 TraceCheckUtils]: 28: Hoare triple {33749#true} call #t~ret20 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:32,342 INFO L290 TraceCheckUtils]: 29: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-15 17:42:32,342 INFO L290 TraceCheckUtils]: 30: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-15 17:42:32,342 INFO L290 TraceCheckUtils]: 31: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-15 17:42:32,342 INFO L290 TraceCheckUtils]: 32: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-15 17:42:32,342 INFO L290 TraceCheckUtils]: 33: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-15 17:42:32,342 INFO L290 TraceCheckUtils]: 34: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-15 17:42:32,342 INFO L290 TraceCheckUtils]: 35: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-15 17:42:32,342 INFO L290 TraceCheckUtils]: 36: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-15 17:42:32,343 INFO L290 TraceCheckUtils]: 37: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,343 INFO L290 TraceCheckUtils]: 38: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,343 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,344 INFO L290 TraceCheckUtils]: 40: Hoare triple {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret20 && #t~ret20 <= 2147483647;~status~0 := #t~ret20;havoc #t~ret20; {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,344 INFO L290 TraceCheckUtils]: 41: Hoare triple {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,344 INFO L290 TraceCheckUtils]: 42: Hoare triple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,345 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {33749#true} #723#return; {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,345 INFO L290 TraceCheckUtils]: 44: Hoare triple {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,345 INFO L290 TraceCheckUtils]: 45: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,346 INFO L290 TraceCheckUtils]: 46: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,346 INFO L290 TraceCheckUtils]: 47: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,346 INFO L290 TraceCheckUtils]: 48: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,346 INFO L290 TraceCheckUtils]: 49: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,346 INFO L290 TraceCheckUtils]: 50: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,347 INFO L290 TraceCheckUtils]: 51: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-15 17:42:32,347 INFO L290 TraceCheckUtils]: 52: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {33750#false} is VALID [2022-04-15 17:42:32,347 INFO L272 TraceCheckUtils]: 53: Hoare triple {33750#false} call errorFn(); {33750#false} is VALID [2022-04-15 17:42:32,347 INFO L290 TraceCheckUtils]: 54: Hoare triple {33750#false} assume !false; {33750#false} is VALID [2022-04-15 17:42:32,347 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:42:32,347 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:42:32,347 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1247095816] [2022-04-15 17:42:32,347 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1247095816] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:32,348 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:32,348 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-15 17:42:32,348 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:42:32,348 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [652334004] [2022-04-15 17:42:32,348 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [652334004] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:32,348 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:32,348 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-15 17:42:32,348 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [757089926] [2022-04-15 17:42:32,348 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:42:32,349 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-15 17:42:32,349 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:42:32,349 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:32,379 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:32,379 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-15 17:42:32,380 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:32,380 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-15 17:42:32,380 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-04-15 17:42:32,380 INFO L87 Difference]: Start difference. First operand 188 states and 232 transitions. Second operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:34,613 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:34,613 INFO L93 Difference]: Finished difference Result 204 states and 248 transitions. [2022-04-15 17:42:34,613 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-15 17:42:34,613 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-15 17:42:34,613 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:42:34,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:34,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 211 transitions. [2022-04-15 17:42:34,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:34,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 211 transitions. [2022-04-15 17:42:34,616 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 211 transitions. [2022-04-15 17:42:34,800 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 211 edges. 211 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:34,803 INFO L225 Difference]: With dead ends: 204 [2022-04-15 17:42:34,803 INFO L226 Difference]: Without dead ends: 166 [2022-04-15 17:42:34,803 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-04-15 17:42:34,803 INFO L913 BasicCegarLoop]: 161 mSDtfsCounter, 345 mSDsluCounter, 489 mSDsCounter, 0 mSdLazyCounter, 923 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 345 SdHoareTripleChecker+Valid, 650 SdHoareTripleChecker+Invalid, 1000 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 923 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-15 17:42:34,804 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [345 Valid, 650 Invalid, 1000 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 923 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-15 17:42:34,804 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2022-04-15 17:42:35,107 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 166. [2022-04-15 17:42:35,108 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:42:35,108 INFO L82 GeneralOperation]: Start isEquivalent. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-15 17:42:35,109 INFO L74 IsIncluded]: Start isIncluded. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-15 17:42:35,109 INFO L87 Difference]: Start difference. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-15 17:42:35,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:35,110 INFO L93 Difference]: Finished difference Result 166 states and 189 transitions. [2022-04-15 17:42:35,111 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-15 17:42:35,111 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:35,111 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:35,111 INFO L74 IsIncluded]: Start isIncluded. First operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 166 states. [2022-04-15 17:42:35,111 INFO L87 Difference]: Start difference. First operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 166 states. [2022-04-15 17:42:35,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:35,113 INFO L93 Difference]: Finished difference Result 166 states and 189 transitions. [2022-04-15 17:42:35,113 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-15 17:42:35,113 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:35,113 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:35,113 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:42:35,113 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:42:35,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-15 17:42:35,115 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 189 transitions. [2022-04-15 17:42:35,115 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 189 transitions. Word has length 55 [2022-04-15 17:42:35,115 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:42:35,115 INFO L478 AbstractCegarLoop]: Abstraction has 166 states and 189 transitions. [2022-04-15 17:42:35,115 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-15 17:42:35,115 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 166 states and 189 transitions. [2022-04-15 17:42:35,349 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 189 edges. 189 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:35,349 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-15 17:42:35,349 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-04-15 17:42:35,349 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:42:35,350 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:42:35,350 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2022-04-15 17:42:35,350 INFO L403 AbstractCegarLoop]: === Iteration 22 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:42:35,350 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:42:35,350 INFO L85 PathProgramCache]: Analyzing trace with hash 1918234721, now seen corresponding path program 1 times [2022-04-15 17:42:35,350 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:35,350 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [624089013] [2022-04-15 17:42:35,350 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:42:35,350 INFO L85 PathProgramCache]: Analyzing trace with hash 1918234721, now seen corresponding path program 2 times [2022-04-15 17:42:35,351 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:42:35,351 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [494700915] [2022-04-15 17:42:35,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:42:35,351 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:42:35,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:35,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-15 17:42:35,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:35,416 INFO L290 TraceCheckUtils]: 0: Hoare triple {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-15 17:42:35,416 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-15 17:42:35,416 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #783#return; {34884#true} is VALID [2022-04-15 17:42:35,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-15 17:42:35,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:35,434 INFO L290 TraceCheckUtils]: 0: Hoare triple {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-15 17:42:35,434 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-15 17:42:35,434 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #715#return; {34884#true} is VALID [2022-04-15 17:42:35,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-15 17:42:35,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:35,445 INFO L290 TraceCheckUtils]: 0: Hoare triple {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-15 17:42:35,445 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-15 17:42:35,445 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #717#return; {34884#true} is VALID [2022-04-15 17:42:35,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-15 17:42:35,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:35,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-15 17:42:35,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:35,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-15 17:42:35,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-15 17:42:35,541 INFO L290 TraceCheckUtils]: 0: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-15 17:42:35,541 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-15 17:42:35,541 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-15 17:42:35,541 INFO L290 TraceCheckUtils]: 0: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-15 17:42:35,542 INFO L272 TraceCheckUtils]: 1: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:35,542 INFO L290 TraceCheckUtils]: 2: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-15 17:42:35,542 INFO L290 TraceCheckUtils]: 3: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-15 17:42:35,542 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-15 17:42:35,543 INFO L290 TraceCheckUtils]: 5: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-15 17:42:35,543 INFO L290 TraceCheckUtils]: 6: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-15 17:42:35,544 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-15 17:42:35,544 INFO L290 TraceCheckUtils]: 0: Hoare triple {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {34884#true} is VALID [2022-04-15 17:42:35,544 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume 0 != ~compRegistered~0; {34884#true} is VALID [2022-04-15 17:42:35,545 INFO L272 TraceCheckUtils]: 2: Hoare triple {34884#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:35,545 INFO L290 TraceCheckUtils]: 3: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-15 17:42:35,546 INFO L272 TraceCheckUtils]: 4: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:35,546 INFO L290 TraceCheckUtils]: 5: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-15 17:42:35,546 INFO L290 TraceCheckUtils]: 6: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-15 17:42:35,546 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-15 17:42:35,546 INFO L290 TraceCheckUtils]: 8: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-15 17:42:35,546 INFO L290 TraceCheckUtils]: 9: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-15 17:42:35,547 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-15 17:42:35,548 INFO L290 TraceCheckUtils]: 11: Hoare triple {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-15 17:42:35,548 INFO L290 TraceCheckUtils]: 12: Hoare triple {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {34885#false} is VALID [2022-04-15 17:42:35,548 INFO L290 TraceCheckUtils]: 13: Hoare triple {34885#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {34885#false} is VALID [2022-04-15 17:42:35,548 INFO L290 TraceCheckUtils]: 14: Hoare triple {34885#false} assume 0 == ~tmp_ndt_6~0; {34885#false} is VALID [2022-04-15 17:42:35,548 INFO L290 TraceCheckUtils]: 15: Hoare triple {34885#false} ~returnVal2~0 := 0; {34885#false} is VALID [2022-04-15 17:42:35,548 INFO L290 TraceCheckUtils]: 16: Hoare triple {34885#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {34885#false} is VALID [2022-04-15 17:42:35,548 INFO L290 TraceCheckUtils]: 17: Hoare triple {34885#false} #res := ~returnVal2~0; {34885#false} is VALID [2022-04-15 17:42:35,548 INFO L290 TraceCheckUtils]: 18: Hoare triple {34885#false} assume true; {34885#false} is VALID [2022-04-15 17:42:35,548 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {34885#false} {34884#true} #755#return; {34885#false} is VALID [2022-04-15 17:42:35,550 INFO L272 TraceCheckUtils]: 0: Hoare triple {34884#true} call ULTIMATE.init(); {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-15 17:42:35,550 INFO L290 TraceCheckUtils]: 1: Hoare triple {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-15 17:42:35,550 INFO L290 TraceCheckUtils]: 2: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-15 17:42:35,550 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {34884#true} {34884#true} #783#return; {34884#true} is VALID [2022-04-15 17:42:35,550 INFO L272 TraceCheckUtils]: 4: Hoare triple {34884#true} call #t~ret81 := main(); {34884#true} is VALID [2022-04-15 17:42:35,550 INFO L290 TraceCheckUtils]: 5: Hoare triple {34884#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {34884#true} is VALID [2022-04-15 17:42:35,551 INFO L272 TraceCheckUtils]: 6: Hoare triple {34884#true} call _BLAST_init(); {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:35,551 INFO L290 TraceCheckUtils]: 7: Hoare triple {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-15 17:42:35,551 INFO L290 TraceCheckUtils]: 8: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-15 17:42:35,551 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {34884#true} {34884#true} #715#return; {34884#true} is VALID [2022-04-15 17:42:35,551 INFO L290 TraceCheckUtils]: 10: Hoare triple {34884#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-15 17:42:35,552 INFO L290 TraceCheckUtils]: 11: Hoare triple {34884#true} assume !(0 == ~irp_choice~0); {34884#true} is VALID [2022-04-15 17:42:35,552 INFO L272 TraceCheckUtils]: 12: Hoare triple {34884#true} call stub_driver_init(); {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:35,552 INFO L290 TraceCheckUtils]: 13: Hoare triple {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-15 17:42:35,552 INFO L290 TraceCheckUtils]: 14: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-15 17:42:35,552 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {34884#true} {34884#true} #717#return; {34884#true} is VALID [2022-04-15 17:42:35,552 INFO L290 TraceCheckUtils]: 16: Hoare triple {34884#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {34884#true} is VALID [2022-04-15 17:42:35,553 INFO L290 TraceCheckUtils]: 17: Hoare triple {34884#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {34884#true} is VALID [2022-04-15 17:42:35,553 INFO L290 TraceCheckUtils]: 18: Hoare triple {34884#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {34884#true} is VALID [2022-04-15 17:42:35,553 INFO L290 TraceCheckUtils]: 19: Hoare triple {34884#true} assume 3 == ~tmp_ndt_3~0; {34884#true} is VALID [2022-04-15 17:42:35,553 INFO L272 TraceCheckUtils]: 20: Hoare triple {34884#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {34884#true} is VALID [2022-04-15 17:42:35,553 INFO L290 TraceCheckUtils]: 21: Hoare triple {34884#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {34884#true} is VALID [2022-04-15 17:42:35,553 INFO L290 TraceCheckUtils]: 22: Hoare triple {34884#true} assume 0 == ~irpStack__MinorFunction~0; {34884#true} is VALID [2022-04-15 17:42:35,553 INFO L290 TraceCheckUtils]: 23: Hoare triple {34884#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {34884#true} is VALID [2022-04-15 17:42:35,553 INFO L290 TraceCheckUtils]: 24: Hoare triple {34884#true} assume !(~s~0 != ~NP~0); {34884#true} is VALID [2022-04-15 17:42:35,553 INFO L290 TraceCheckUtils]: 25: Hoare triple {34884#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {34884#true} is VALID [2022-04-15 17:42:35,553 INFO L290 TraceCheckUtils]: 26: Hoare triple {34884#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {34884#true} is VALID [2022-04-15 17:42:35,554 INFO L272 TraceCheckUtils]: 27: Hoare triple {34884#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-15 17:42:35,554 INFO L290 TraceCheckUtils]: 28: Hoare triple {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {34884#true} is VALID [2022-04-15 17:42:35,554 INFO L290 TraceCheckUtils]: 29: Hoare triple {34884#true} assume 0 != ~compRegistered~0; {34884#true} is VALID [2022-04-15 17:42:35,554 INFO L272 TraceCheckUtils]: 30: Hoare triple {34884#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:35,555 INFO L290 TraceCheckUtils]: 31: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-15 17:42:35,555 INFO L272 TraceCheckUtils]: 32: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-15 17:42:35,555 INFO L290 TraceCheckUtils]: 33: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-15 17:42:35,555 INFO L290 TraceCheckUtils]: 34: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-15 17:42:35,555 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-15 17:42:35,556 INFO L290 TraceCheckUtils]: 36: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-15 17:42:35,556 INFO L290 TraceCheckUtils]: 37: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-15 17:42:35,557 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-15 17:42:35,557 INFO L290 TraceCheckUtils]: 39: Hoare triple {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-15 17:42:35,558 INFO L290 TraceCheckUtils]: 40: Hoare triple {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L290 TraceCheckUtils]: 41: Hoare triple {34885#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L290 TraceCheckUtils]: 42: Hoare triple {34885#false} assume 0 == ~tmp_ndt_6~0; {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L290 TraceCheckUtils]: 43: Hoare triple {34885#false} ~returnVal2~0 := 0; {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L290 TraceCheckUtils]: 44: Hoare triple {34885#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L290 TraceCheckUtils]: 45: Hoare triple {34885#false} #res := ~returnVal2~0; {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L290 TraceCheckUtils]: 46: Hoare triple {34885#false} assume true; {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {34885#false} {34884#true} #755#return; {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L290 TraceCheckUtils]: 48: Hoare triple {34885#false} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L290 TraceCheckUtils]: 49: Hoare triple {34885#false} assume !(259 == ~__cil_tmp23~0); {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L290 TraceCheckUtils]: 50: Hoare triple {34885#false} assume ~status~0 >= 0; {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L290 TraceCheckUtils]: 51: Hoare triple {34885#false} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L290 TraceCheckUtils]: 52: Hoare triple {34885#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L272 TraceCheckUtils]: 53: Hoare triple {34885#false} call IofCompleteRequest(~Irp, 0); {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L290 TraceCheckUtils]: 54: Hoare triple {34885#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {34885#false} is VALID [2022-04-15 17:42:35,558 INFO L290 TraceCheckUtils]: 55: Hoare triple {34885#false} assume !(~s~0 == ~NP~0); {34885#false} is VALID [2022-04-15 17:42:35,559 INFO L272 TraceCheckUtils]: 56: Hoare triple {34885#false} call errorFn(); {34885#false} is VALID [2022-04-15 17:42:35,559 INFO L290 TraceCheckUtils]: 57: Hoare triple {34885#false} assume !false; {34885#false} is VALID [2022-04-15 17:42:35,559 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-15 17:42:35,559 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-15 17:42:35,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [494700915] [2022-04-15 17:42:35,560 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [494700915] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:35,560 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:35,560 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-15 17:42:35,560 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-15 17:42:35,560 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [624089013] [2022-04-15 17:42:35,560 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [624089013] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-15 17:42:35,560 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-15 17:42:35,560 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-15 17:42:35,560 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2007519047] [2022-04-15 17:42:35,560 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-15 17:42:35,561 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-15 17:42:35,561 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-15 17:42:35,561 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:35,604 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:35,604 INFO L554 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-15 17:42:35,604 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:35,605 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-15 17:42:35,605 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-15 17:42:35,605 INFO L87 Difference]: Start difference. First operand 166 states and 189 transitions. Second operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:36,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:36,666 INFO L93 Difference]: Finished difference Result 202 states and 230 transitions. [2022-04-15 17:42:36,666 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-15 17:42:36,667 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-15 17:42:36,667 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-15 17:42:36,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:36,668 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 197 transitions. [2022-04-15 17:42:36,668 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:36,669 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 197 transitions. [2022-04-15 17:42:36,669 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 197 transitions. [2022-04-15 17:42:36,830 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 197 edges. 197 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:36,832 INFO L225 Difference]: With dead ends: 202 [2022-04-15 17:42:36,832 INFO L226 Difference]: Without dead ends: 160 [2022-04-15 17:42:36,832 INFO L912 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-15 17:42:36,832 INFO L913 BasicCegarLoop]: 130 mSDtfsCounter, 128 mSDsluCounter, 292 mSDsCounter, 0 mSdLazyCounter, 283 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 422 SdHoareTripleChecker+Invalid, 328 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 283 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-15 17:42:36,833 INFO L914 BasicCegarLoop]: SdHoareTripleChecker [129 Valid, 422 Invalid, 328 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 283 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-15 17:42:36,833 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-04-15 17:42:37,093 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 160. [2022-04-15 17:42:37,093 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-15 17:42:37,094 INFO L82 GeneralOperation]: Start isEquivalent. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-15 17:42:37,094 INFO L74 IsIncluded]: Start isIncluded. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-15 17:42:37,094 INFO L87 Difference]: Start difference. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-15 17:42:37,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:37,097 INFO L93 Difference]: Finished difference Result 160 states and 180 transitions. [2022-04-15 17:42:37,097 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-15 17:42:37,097 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:37,097 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:37,097 INFO L74 IsIncluded]: Start isIncluded. First operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 160 states. [2022-04-15 17:42:37,097 INFO L87 Difference]: Start difference. First operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 160 states. [2022-04-15 17:42:37,099 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-15 17:42:37,099 INFO L93 Difference]: Finished difference Result 160 states and 180 transitions. [2022-04-15 17:42:37,099 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-15 17:42:37,100 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-15 17:42:37,100 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-15 17:42:37,100 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-15 17:42:37,100 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-15 17:42:37,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-15 17:42:37,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 180 transitions. [2022-04-15 17:42:37,102 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 180 transitions. Word has length 58 [2022-04-15 17:42:37,102 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-15 17:42:37,102 INFO L478 AbstractCegarLoop]: Abstraction has 160 states and 180 transitions. [2022-04-15 17:42:37,102 INFO L479 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-15 17:42:37,103 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 160 states and 180 transitions. [2022-04-15 17:42:37,335 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 180 edges. 180 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-15 17:42:37,335 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-15 17:42:37,336 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-04-15 17:42:37,336 INFO L491 BasicCegarLoop]: Found error trace [2022-04-15 17:42:37,336 INFO L499 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-15 17:42:37,336 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2022-04-15 17:42:37,336 INFO L403 AbstractCegarLoop]: === Iteration 23 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-15 17:42:37,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-15 17:42:37,337 INFO L85 PathProgramCache]: Analyzing trace with hash 1199488421, now seen corresponding path program 1 times [2022-04-15 17:42:37,337 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-15 17:42:37,337 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [912036818] [2022-04-15 17:42:37,337 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-15 17:42:37,337 INFO L85 PathProgramCache]: Analyzing trace with hash 1199488421, now seen corresponding path program 2 times [2022-04-15 17:42:37,337 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-15 17:42:37,337 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [449239780] [2022-04-15 17:42:37,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-15 17:42:37,337 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-15 17:42:37,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-04-15 17:42:37,366 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-04-15 17:42:37,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-04-15 17:42:37,400 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-04-15 17:42:37,401 INFO L130 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found a feasible trace [2022-04-15 17:42:37,401 INFO L618 BasicCegarLoop]: Counterexample is feasible [2022-04-15 17:42:37,403 INFO L788 garLoopResultBuilder]: Registering result UNSAFE for location errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-04-15 17:42:37,404 WARN L460 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22 [2022-04-15 17:42:37,406 INFO L719 BasicCegarLoop]: Path program histogram: [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2] [2022-04-15 17:42:37,408 INFO L177 ceAbstractionStarter]: Computing trace abstraction results [2022-04-15 17:42:37,423 WARN L170 areAnnotationChecker]: reach_errorENTRY has no Hoare annotation [2022-04-15 17:42:37,423 WARN L170 areAnnotationChecker]: KeSetEventENTRY has no Hoare annotation [2022-04-15 17:42:37,423 WARN L170 areAnnotationChecker]: KbFilter_CompleteENTRY has no Hoare annotation [2022-04-15 17:42:37,423 WARN L170 areAnnotationChecker]: stub_driver_initENTRY has no Hoare annotation [2022-04-15 17:42:37,423 WARN L170 areAnnotationChecker]: KbFilter_PowerENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: _BLAST_initENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: errorFnENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: errorFnENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: IofCallDriverENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: PoCallDriverENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: IofCompleteRequestENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: KbFilter_PnPENTRY has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: reach_errorFINAL has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: KeSetEventFINAL has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: stub_driver_initFINAL has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: _BLAST_initFINAL has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: errorFnFINAL has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-04-15 17:42:37,424 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L475-1 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L475 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L475 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: KeSetEventEXIT has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L624-1 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: stub_driver_initEXIT has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: _BLAST_initEXIT has no Hoare annotation [2022-04-15 17:42:37,425 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L489-1 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L756 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L756 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L754-1 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L645 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L645 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L935 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L935 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L883 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L883 has no Hoare annotation [2022-04-15 17:42:37,426 WARN L170 areAnnotationChecker]: L582 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L582 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L589 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L589 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L562-1 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L562 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L562 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L678-1 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L107 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L109 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L109 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: KbFilter_CompleteFINAL has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L342 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L342 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L724 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L724 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L428 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L814-1 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L594-1 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L180-1 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L225-1 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L241-1 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L256-1 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L734-1 has no Hoare annotation [2022-04-15 17:42:37,427 WARN L170 areAnnotationChecker]: L546-1 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L328 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L328 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L491-1 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L504 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L504 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L756-1 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L653 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L644 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L644 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L884 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L684 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L684 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2022-04-15 17:42:37,428 WARN L170 areAnnotationChecker]: L110 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L112 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L112 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L351 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L351 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L734 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L734 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L709 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L709 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: PoCallDriverFINAL has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L740 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L740 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: IofCallDriverFINAL has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L413 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L413 has no Hoare annotation [2022-04-15 17:42:37,429 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L505 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L760 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L760 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L770 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L660 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L660 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L997 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L997 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L1003 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L1003 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L892 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L892 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L596 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L596 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L997-1 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L267 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L684-1 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L221 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L221 has no Hoare annotation [2022-04-15 17:42:37,430 WARN L170 areAnnotationChecker]: L113 has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: L115 has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: L115 has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: L356 has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: L356 has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: PoCallDriverEXIT has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: L604 has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: L606 has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: L192-1 has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: L231-1 has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: L247-1 has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: L262-1 has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: L740-1 has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-15 17:42:37,431 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L524 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L524 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L510 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L512 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L775 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L777 has no Hoare annotation [2022-04-15 17:42:37,432 WARN L170 areAnnotationChecker]: L660-1 has no Hoare annotation [2022-04-15 17:42:37,433 WARN L170 areAnnotationChecker]: L1003-1 has no Hoare annotation [2022-04-15 17:42:37,433 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-15 17:42:37,433 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-15 17:42:37,433 WARN L170 areAnnotationChecker]: L903 has no Hoare annotation [2022-04-15 17:42:37,433 WARN L170 areAnnotationChecker]: L903 has no Hoare annotation [2022-04-15 17:42:37,433 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlFINAL has no Hoare annotation [2022-04-15 17:42:37,433 WARN L170 areAnnotationChecker]: KbFilter_PnPFINAL has no Hoare annotation [2022-04-15 17:42:37,433 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughFINAL has no Hoare annotation [2022-04-15 17:42:37,433 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-04-15 17:42:37,433 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-04-15 17:42:37,433 WARN L170 areAnnotationChecker]: L225 has no Hoare annotation [2022-04-15 17:42:37,433 WARN L170 areAnnotationChecker]: L225 has no Hoare annotation [2022-04-15 17:42:37,433 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L357 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L357 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L361 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L361 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectFINAL has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: KbFilter_PowerFINAL has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseFINAL has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L956-2 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L956-2 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlEXIT has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: KbFilter_PnPEXIT has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughEXIT has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughEXIT has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L256 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L256 has no Hoare annotation [2022-04-15 17:42:37,434 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L383 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L366 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L366 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectEXIT has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L197-2 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L197-2 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: KbFilter_PowerEXIT has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseEXIT has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseEXIT has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L959-1 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L917 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L917 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L398 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L388 has no Hoare annotation [2022-04-15 17:42:37,435 WARN L170 areAnnotationChecker]: L124 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L124 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L367 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L367 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L371 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L371 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L199-1 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L206 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L206 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L205 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L393 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L546 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L546 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L814 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L814 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L374 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-04-15 17:42:37,436 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L447 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L447 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L931 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L931 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L133 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L133 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L453 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L453 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L136 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L136 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L142 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L142 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L145 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L145 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L148 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L148 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-04-15 17:42:37,437 WARN L170 areAnnotationChecker]: L154 has no Hoare annotation [2022-04-15 17:42:37,438 WARN L170 areAnnotationChecker]: L154 has no Hoare annotation [2022-04-15 17:42:37,438 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2022-04-15 17:42:37,438 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2022-04-15 17:42:37,438 WARN L170 areAnnotationChecker]: L160 has no Hoare annotation [2022-04-15 17:42:37,438 WARN L170 areAnnotationChecker]: L160 has no Hoare annotation [2022-04-15 17:42:37,438 WARN L170 areAnnotationChecker]: L163 has no Hoare annotation [2022-04-15 17:42:37,438 WARN L170 areAnnotationChecker]: L163 has no Hoare annotation [2022-04-15 17:42:37,438 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-04-15 17:42:37,438 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-04-15 17:42:37,438 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-04-15 17:42:37,442 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 15.04 05:42:37 BoogieIcfgContainer [2022-04-15 17:42:37,442 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-04-15 17:42:37,443 INFO L158 Benchmark]: Toolchain (without parser) took 73515.99ms. Allocated memory was 210.8MB in the beginning and 584.1MB in the end (delta: 373.3MB). Free memory was 162.1MB in the beginning and 451.4MB in the end (delta: -289.4MB). Peak memory consumption was 84.4MB. Max. memory is 8.0GB. [2022-04-15 17:42:37,443 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 210.8MB. Free memory was 178.8MB in the beginning and 178.7MB in the end (delta: 151.8kB). There was no memory consumed. Max. memory is 8.0GB. [2022-04-15 17:42:37,443 INFO L158 Benchmark]: CACSL2BoogieTranslator took 345.47ms. Allocated memory is still 210.8MB. Free memory was 161.9MB in the beginning and 177.5MB in the end (delta: -15.6MB). Peak memory consumption was 13.3MB. Max. memory is 8.0GB. [2022-04-15 17:42:37,443 INFO L158 Benchmark]: Boogie Preprocessor took 57.58ms. Allocated memory is still 210.8MB. Free memory was 177.0MB in the beginning and 173.9MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-04-15 17:42:37,444 INFO L158 Benchmark]: RCFGBuilder took 815.43ms. Allocated memory is still 210.8MB. Free memory was 173.9MB in the beginning and 130.8MB in the end (delta: 43.0MB). Peak memory consumption was 43.0MB. Max. memory is 8.0GB. [2022-04-15 17:42:37,444 INFO L158 Benchmark]: TraceAbstraction took 72290.90ms. Allocated memory was 210.8MB in the beginning and 584.1MB in the end (delta: 373.3MB). Free memory was 130.4MB in the beginning and 451.4MB in the end (delta: -321.1MB). Peak memory consumption was 53.3MB. Max. memory is 8.0GB. [2022-04-15 17:42:37,446 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 210.8MB. Free memory was 178.8MB in the beginning and 178.7MB in the end (delta: 151.8kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 345.47ms. Allocated memory is still 210.8MB. Free memory was 161.9MB in the beginning and 177.5MB in the end (delta: -15.6MB). Peak memory consumption was 13.3MB. Max. memory is 8.0GB. * Boogie Preprocessor took 57.58ms. Allocated memory is still 210.8MB. Free memory was 177.0MB in the beginning and 173.9MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 815.43ms. Allocated memory is still 210.8MB. Free memory was 173.9MB in the beginning and 130.8MB in the end (delta: 43.0MB). Peak memory consumption was 43.0MB. Max. memory is 8.0GB. * TraceAbstraction took 72290.90ms. Allocated memory was 210.8MB in the beginning and 584.1MB in the end (delta: 373.3MB). Free memory was 130.4MB in the beginning and 451.4MB in the end (delta: -321.1MB). Peak memory consumption was 53.3MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 1013]: a call to reach_error is reachable a call to reach_error is reachable We found a FailurePath: [L23] int KernelMode ; [L24] int Executive ; [L25] int DevicePowerState ; [L26] int s ; [L27] int UNLOADED ; [L28] int NP ; [L29] int DC ; [L30] int SKIP1 ; [L31] int SKIP2 ; [L32] int MPR1 ; [L33] int MPR3 ; [L34] int IPC ; [L35] int pended ; [L36] int compFptr ; [L37] int compRegistered ; [L38] int lowerDriverReturn ; [L39] int setEventCalled ; [L40] int customIrp ; [L41] int myStatus ; [L294] int status ; [L295] int irp = __VERIFIER_nondet_int() ; [L296] int pirp ; [L297] int pirp__IoStatus__Status ; [L298] int irp_choice = __VERIFIER_nondet_int() ; [L299] int devobj = __VERIFIER_nondet_int() ; [L300] int __cil_tmp8 ; [L302] KernelMode = 0 [L303] Executive = 0 [L304] DevicePowerState = 1 [L305] s = 0 [L306] UNLOADED = 0 [L307] NP = 0 [L308] DC = 0 [L309] SKIP1 = 0 [L310] SKIP2 = 0 [L311] MPR1 = 0 [L312] MPR3 = 0 [L313] IPC = 0 [L314] pended = 0 [L315] compFptr = 0 [L316] compRegistered = 0 [L317] lowerDriverReturn = 0 [L318] setEventCalled = 0 [L319] customIrp = 0 [L320] myStatus = 0 [L324] status = 0 [L325] pirp = irp [L326] CALL _BLAST_init() [L61] UNLOADED = 0 [L62] NP = 1 [L63] DC = 2 [L64] SKIP1 = 3 [L65] SKIP2 = 4 [L66] MPR1 = 5 [L67] MPR3 = 6 [L68] IPC = 7 [L69] s = UNLOADED [L70] pended = 0 [L71] compFptr = 0 [L72] compRegistered = 0 [L73] lowerDriverReturn = 0 [L74] setEventCalled = 0 [L75] customIrp = 0 [L326] RET _BLAST_init() [L328] COND TRUE status >= 0 [L329] s = NP [L330] customIrp = 0 [L331] setEventCalled = customIrp [L332] lowerDriverReturn = setEventCalled [L333] compRegistered = lowerDriverReturn [L334] pended = compRegistered [L335] pirp__IoStatus__Status = 0 [L336] myStatus = 0 [L337] COND FALSE !(irp_choice == 0) [L342] CALL stub_driver_init() [L47] s = NP [L48] pended = 0 [L49] compFptr = 0 [L50] compRegistered = 0 [L51] lowerDriverReturn = 0 [L52] setEventCalled = 0 [L53] customIrp = 0 [L342] RET stub_driver_init() [L345] COND FALSE !(status < 0) [L349] int tmp_ndt_1; [L350] tmp_ndt_1 = __VERIFIER_nondet_int() [L351] COND FALSE !(tmp_ndt_1 == 0) [L354] int tmp_ndt_2; [L355] tmp_ndt_2 = __VERIFIER_nondet_int() [L356] COND FALSE !(tmp_ndt_2 == 1) [L359] int tmp_ndt_3; [L360] tmp_ndt_3 = __VERIFIER_nondet_int() [L361] COND TRUE tmp_ndt_3 == 3 [L388] CALL, EXPR KbFilter_PnP(devobj, pirp) [L80] int devExt ; [L81] int irpStack ; [L82] int status ; [L83] int event = __VERIFIER_nondet_int() ; [L84] int DeviceObject__DeviceExtension = __VERIFIER_nondet_int() ; [L85] int Irp__Tail__Overlay__CurrentStackLocation = __VERIFIER_nondet_int() ; [L86] int irpStack__MinorFunction = __VERIFIER_nondet_int() ; [L87] int devExt__TopOfStack = __VERIFIER_nondet_int() ; [L88] int devExt__Started ; [L89] int devExt__Removed ; [L90] int devExt__SurpriseRemoved ; [L91] int Irp__IoStatus__Status ; [L92] int Irp__IoStatus__Information ; [L93] int Irp__CurrentLocation = __VERIFIER_nondet_int() ; [L94] int irpSp ; [L95] int nextIrpSp ; [L96] int nextIrpSp__Control ; [L97] int irpSp___0 ; [L98] int irpSp__Context ; [L99] int irpSp__Control ; [L100] long __cil_tmp23 ; [L103] status = 0 [L104] devExt = DeviceObject__DeviceExtension [L105] irpStack = Irp__Tail__Overlay__CurrentStackLocation [L106] COND FALSE !(irpStack__MinorFunction == 0) [L109] COND FALSE !(irpStack__MinorFunction == 23) [L112] COND TRUE irpStack__MinorFunction == 2 [L236] devExt__Removed = 1 [L237] COND TRUE s == NP [L238] s = SKIP1 [L245] Irp__CurrentLocation ++ [L246] Irp__Tail__Overlay__CurrentStackLocation ++ [L247] CALL IofCallDriver(devExt__TopOfStack, Irp) [L483] int returnVal2 ; [L484] int compRetStatus ; [L485] int lcontext = __VERIFIER_nondet_int() ; [L486] long long __cil_tmp7 ; [L489] COND FALSE !(\read(compRegistered)) [L502] int tmp_ndt_6; [L503] tmp_ndt_6 = __VERIFIER_nondet_int() [L504] COND FALSE !(tmp_ndt_6 == 0) [L507] int tmp_ndt_7; [L508] tmp_ndt_7 = __VERIFIER_nondet_int() [L509] COND TRUE tmp_ndt_7 == 1 [L518] returnVal2 = -1073741823 [L528] COND FALSE !(s == NP) [L532] COND FALSE !(s == MPR1) [L541] COND TRUE s == SKIP1 [L542] s = SKIP2 [L543] lowerDriverReturn = returnVal2 [L551] return (returnVal2); [L247] RET IofCallDriver(devExt__TopOfStack, Irp) [L248] status = 0 [L290] return (status); [L388] RET, EXPR KbFilter_PnP(devobj, pirp) [L388] status = KbFilter_PnP(devobj, pirp) [L412] COND FALSE !(pended == 1) [L420] COND FALSE !(pended == 1) [L428] COND TRUE s != UNLOADED [L429] COND TRUE status != -1 [L430] COND FALSE !(s != SKIP2) [L440] COND FALSE !(pended == 1) [L447] COND FALSE !(s == DC) [L452] COND TRUE status != lowerDriverReturn [L453] CALL errorFn() [L1013] reach_error() - StatisticsResult: Ultimate Automizer benchmark data CFG has 19 procedures, 243 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 72.2s, OverallIterations: 23, TraceHistogramMax: 1, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 52.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 10321 SdHoareTripleChecker+Valid, 14.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 10301 mSDsluCounter, 12819 SdHoareTripleChecker+Invalid, 14.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 7681 mSDsCounter, 1995 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 15378 IncrementalHoareTripleChecker+Invalid, 17373 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1995 mSolverCounterUnsat, 5138 mSDtfsCounter, 15378 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 468 GetRequests, 198 SyntacticMatches, 1 SemanticMatches, 269 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 447 ImplicationChecksByTransitivity, 3.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=344occurred in iteration=3, InterpolantAutomatonStates: 230, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 6.1s AutomataMinimizationTime, 22 MinimizatonAttempts, 227 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: No data available, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2022-04-15 17:42:37,489 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...